Security, compliance and data handling
SOC 2 infrastructure, Overskill certification status, DPA requests, AI-gateway log retention, and sign-in branding.
Security questionnaires and certifications
Overskill runs on SOC 2 Type II certified infrastructure — Render (application), Cloudflare (generated apps and edge), and Turso (generated-app data). Overskill itself does not hold its own SOC 2 certification at this time. A data-processing agreement (DPA) is available on request. AI-gateway logs for customer app traffic are metadata-only; no prompt or response content is retained.
For security questionnaires, refer to each provider's public trust page:
- Render Security and Trust — application infrastructure.
- Cloudflare SOC 2 Trust Hub — generated apps and edge.
- Turso Trust Center — generated-app data.
These certifications belong to the providers. They are not an Overskill-held certification or a certification of your app. Overskill does not provide copies of providers' audit reports; follow each provider's process for documentation.
Request a DPA
A data-processing agreement (DPA) is available on request. Read our DPA page and contact [email protected] with your request or security questionnaire. If your procurement process requires Overskill's own SOC 2 certification, we do not hold one at this time.
AI log retention
AI-gateway logs for customer app traffic are metadata-only; no prompt or response content is retained. This statement is about those gateway logs, not a blanket retention policy for all data stored in Overskill or your app.
White-label and sign-in branding
Every plan carries Overskill branding on generated-app sign-in screens and sign-in emails. This is a product decision, not a bug. Removing that branding is not offered through a plan upgrade, and we do not promise a future white-label release.
Founders' Telegram
The founders' Telegram group is invite-only by design. There is no self-serve join path, and you are not missing a step. There is no invitation to wait for as part of signing up.