Workspace isolation
Every server read and write is scoped to the selected workspace so one organization cannot access another organization's records.
SECURITY BY DEFAULT
Protect client work without slowing delivery.
Scopearo combines strict workspace boundaries, role-based access, durable history, and trusted infrastructure for practical day-to-day protection.Authentication and roles
Clerk handles production authentication while Scopearo enforces Owner, Admin, Manager, Finance, Member, and Viewer permissions on the server.
Protected data movement
Traffic uses HTTPS, secrets remain in encrypted runtime storage, and signed webhooks verify external events before they are processed.
Files and external access
Uploads are validated and limited by plan. Client portal links are tokenized, expire automatically, and can be rotated immediately.
Audit and recovery
Important workspace changes create durable audit records. Operational backups and health checks support recovery and incident investigation.
Payment separation
Paddle acts as merchant of record and processes payment-card details. Scopearo stores only the subscription identifiers and status needed for access.
Transparent data practices
Our policies explain what data is processed, which service providers are involved, and how to request access, correction, or deletion. Read the Privacy Policy or contact Scopearo with a security or privacy question.
CLIENT WORK, MOVING FORWARD