Where your data lives.

WORKSPACE

Organisation name, an optional description, and the admin user. Created when you sign up.

MEMBERS

Full name, email, and status (invited / in-progress / completed). Added by the workspace admin via the Members page.

ASSESSMENT RESPONSES

Each member's answers to the 60-item Compass instrument, stored as structured rows keyed by item id.

DERIVED MANUALS

Working-style positions, archetype assignment, and the rendered manual text. Recomputed deterministically from responses on every read.

TEAM REPORT

Cached Team Compass payload (executive summary, composition map, friction pairings, hiring brief) keyed by workspace.

AI ADVISOR THREADS

Conversation history per admin user — title, message role/content, timestamps, and which members or report sections were pinned.

All customer data sits in a single Postgres database operated by Supabase in the EU region. AI advisor messages and the team report executive summary are sent to OpenAI's API for processing — those payloads transit the OpenAI infrastructure in the United States.

We don't use any third-party analytics, advertising, or tracking providers.

WORKSPACE ADMIN

Sees all members in their workspace, every completed manual, the team report, and AI advisor threads they themselves created. Cannot see threads created by another admin even in the same workspace.

MEMBER

Sees only their own manual via the single-use token link. Cannot see other members' manuals, the team report, or the AI advisor.

COMPASS TEAM

Operational access for debugging only, on request from the workspace admin.

Data is retained for the lifetime of your workspace. When you close a workspace, all associated rows — workspace, members, responses, manuals, reports, AI threads — are deleted within 30 days.

Individual AI advisor threads can be deleted at any time from the sidebar. Deletion is immediate and not recoverable.

You can request a full export of your workspace's data at any time — workspace settings, members, responses, manuals, team report, and AI threads — as a single JSON file. Email mark@buildandship.com and we'll send it within 14 days. Self-serve export is on the roadmap.

To delete a single member's manual, remove them from the Members page. To delete a workspace entirely, email us — we'll confirm, then permanently delete all associated data within 30 days and confirm completion by email.

We use the following sub-processors. We'll notify workspace admins by email at least 30 days before adding a new one.

SUPABASE

Managed Postgres + Auth. EU region. Data controller agreement in place.

OPENAI

AI advisor + team-report synthesis. API tier — does not train on submitted data.

VERCEL

Application hosting. No customer database data is stored on Vercel.