Trust
Trust and security at Answer Patch
Answer Patch runs on Vercel and is served over HTTPS. The processors that handle scan, report, payment, and account data are listed below — the same list as our Privacy Policy. Retention for Fix Reports and share links is documented on the Data Retention page. Report a security issue to support@answerpatch.com.
Last reviewed: August 13, 2026
Hosting and transport
The product is hosted on Vercel and served over HTTPS. We do not claim additional certifications beyond what that stack provides.
Subprocessors
We rely on the following processors to run the Service, each bound to their own data-handling terms. This list matches the Privacy Policy.
- Clerk — Authentication — account sign-in and session management.
- Stripe — Payment processing for the one-time Fix Report purchase. We never receive or store your full card number.
- Vercel — Application hosting, edge network, and deployment.
- Neon — Primary Postgres database (audits, reports, account records).
- Resend — Transactional email — free-scan links and paid-report delivery notifications.
- Vercel AI Gateway — Routes the scanned page content and audit findings to AI models to draft the AI-enhanced sections of a Fix Report.
- Upstash — Rate limiting and abuse prevention for the free-scan flow.
- Inngest — Background-job orchestration — runs the scan and report-generation pipelines; scan and report event metadata (such as audit references) passes through it.
- Sentry — Error monitoring, when enabled, so we can diagnose crashes.
- Axiom — Log management, when enabled — operational and error logs we use to diagnose issues, which can include your email, submitted domain, and hashed request metadata.
Report retention
How long a Fix Report and its share link stay available is documented on the Data Retention page. That page is the source of truth for retention and share-link duration.
Incident contact
If you believe you have found a security issue, email support@answerpatch.com. That is the same support address used across the product. We do not currently publish a separate security mailbox.
What we do not claim
We have not completed a SOC 2 audit and we do not claim a GDPR certification. Privacy rights for people in the EU, UK, or California, and how to exercise them, are described in the Privacy Policy.