Security
Current safeguards and an explicit data boundary
This page describes the MVP, not a future CMMC environment.
Figuora is not initially a CUI-processing environment. Do not upload classified information, Controlled Unclassified Information, export-controlled technical information, or restricted technical files.
- Public opportunity data and ordinary business capability descriptions only.
- Tenant isolation via authentication and row-level security on customer records.
- Secrets stay server-side. The service role key is never shipped to the browser.
- Stripe webhooks are signature-verified. Checkout price IDs are mapped server-side.
- No sensitive-document upload in the MVP.
- AI output is stored with model, prompt version, and source record identifiers.
Figuora assists with opportunity analysis. Verify all solicitation requirements and submission instructions against the official source before acting. Figuora does not guarantee eligibility, award, contract value, or procurement outcome.