Security & Compliance

CompReason stores the role, region, seniority, and optional ceiling you type long enough to draft a pay story. It does not look up wages or email anyone.

What we handle

Input is used only to draft your note. We do not train public models on your submissions without explicit consent.

Data handling commitments

• The fields you type are used only to draft the pay story.
• Encryption in transit & at rest via standard TLS / encrypted storage (GDPR Art.32).
• Least-privilege, role-based access; no resale of business data.
• Erasure on request where technically feasible (GDPR Art.17).

Compliance posture

You remain responsible for any personal data in the fields you type. The draft is not a wage survey and not a legal equal-pay opinion.

Subprocessors

We rely on our hosting provider (Vercel) and payment processor (Waffo). No data is sold.