Security
Security, explained plainly.
What we store, how we protect it, what is live today and what we are still working on.
Keys encrypted at rest
Your App Store Connect key is encrypted with AES-256-GCM before it is stored. The decryption key lives outside the database.
Separated per account
Row-level security on every customer table. One account can never read another account's apps, audits or chats.
You decide what ships
Anything that goes to Apple review, changes prices or cannot be taken back waits for your OK. Routine work like review replies and promotional text Amelia does herself; every change is logged with what it replaced and can be undone in one click.
What we are working on.
Independent penetration test
An external test of the web app and API, with a summary report available to customers on request.
SOC 2 readiness
Mapping our controls to SOC 2 and putting automated evidence collection in place.
EU data residency
An option to keep your workspace data in an EU region.
Last updated October 2026. asopilot is operated by Appkasa LLC, Sharjah Media City (Shams), Sharjah, UAE.
The controls, one by one.
Data protection
- Least data needed
- We store your apps' store metadata, audits, the changes you approve and your App Store Connect key. Never your Apple ID or password.
- No AI training on your data
- Drafts are written through Anthropic's commercial API, which does not train models on API inputs by default.
- Consent where the law asks for it
- In the EU, EEA, UK, Switzerland and Brazil, analytics and ad pixels load only after a visitor agrees. Everywhere, Global Privacy Control and Do Not Track are honoured and anyone can opt out. Page views are counted first-party.
- Deletion on request
- Closing your account deletes your apps, audits, chats and stored keys.
Encryption and access
- TLS everywhere
- All traffic to asopilot and to Apple's APIs is encrypted in transit.
- AES-256-GCM for keys
- Each stored key has its own random IV. The secret column cannot be read by the browser or by signed-in users, only by our server.
- Revocable by you
- Your App Store Connect key can be revoked in Apple at any time, which cuts off access instantly.
- No passwords
- Sign-in is by email link or your Google or Apple account. We do not store passwords.
Monitoring and audit
- Ship log
- Every App Store change records who approved it, when, the old value and the new value.
- Admin audit trail
- Actions taken in our internal admin tools are logged with the person who took them.
- Scoped AI actions
- Amelia can read your data and propose changes. Writing to App Store Connect only happens after an approval, and she never touches availability or territories. A price changes only on a price card you approve, and Undo puts it back.
Operations
- Tested before release
- Changes go to a staging environment first and must pass the full automated test suite before they reach production.
- Managed infrastructure
- The app runs on Vercel and the database on Supabase (Postgres), both with their own security programmes.
- Key rotation
- AI provider keys rotate automatically when one fails, without downtime.
Where your data lives.
The services we rely on to run asopilot, what they do and where they process data.
| Provider | What for | Location |
|---|---|---|
| Supabase | Database and sign-in | Canada (AWS ca-central-1) |
| Vercel | Hosting and serverless functions | Global edge, functions in the US |
| Anthropic | AI drafting for Amelia | United States |
| Resend | Transactional email | United States |
| Apple | App Store Connect API (your own account) | United States |
Questions we get asked
Where is our data stored?
In a Postgres database run by Supabase in Canada. The website runs on Vercel. See the list of sub-processors above.
Can asopilot staff see our data?
Only when needed to support you or fix a problem, and only through logged admin tools. Stored App Store Connect keys are encrypted and never shown in the admin.
Can one customer see another's data?
No. Every table is protected by row-level security tied to the signed-in account.
What can asopilot do in App Store Connect?
Only what the role on each key allows, and you choose the roles: App Manager for listings and reviews, Sales and Reports for numbers (it cannot change anything), or one Admin key for everything. asopilot never changes availability, changes a price only on a card you approve, never manages users and never touches agreements or banking. Amelia only writes after you approve, and every change can be undone.
Do you train AI on our content?
No. We use Anthropic's commercial API, which does not train on API inputs by default, and we do not build models from your data.
Will you tell us about an incident?
Yes. If an incident affects your data we notify you without undue delay, with what happened and what we are doing about it.
What happens when we leave?
Revoke the key in Apple, cancel in Settings, and ask us to delete your workspace. Changes already on your store page stay yours.
Bring your security questionnaire.
Send it over and we will fill it in, or book a call to walk through how asopilot handles your data.
Send your questionnaire