← Candidate Copilot
Security & data
The practices below are also described in our Privacy Policy.
We collect as little as we need, keep each campaign's data to itself, and protect it with standard, boring, effective controls.
How your data is protected
- Passwords are stored only as salted, iterated hashes (PBKDF2). We never store your password in plain text.
- Data is encrypted in transit.
- Sessions are protected by signed, expiring tokens.
- Isolation. Each campaign's data is kept separate from every other campaign's; we never share one campaign's information with another, and campaign data never trains shared models.
Who processes data for us
We use a small number of vetted providers, each processing data only to provide their service to us:
- Resend delivers our transactional and newsletter emails.
- Cloudflare hosts the application and stores its data.
What we do not hold
- We do not ingest, purchase, or custody voter files or voter contact lists.
- We do not handle your campaign's donations; that stays with your committee's own payment processor.