Free-pilot policies. These documents are published in English. The interface language selector does not translate the legal text. For questions or an accessible explanation, contact yingbuilds@gmail.com.
Security approach
DesignBuildFlow, operated by TIMELESS PEARL LLC, uses a tenant- and project-aware permission model intended to limit access to authorized company and project members. Security controls evolve with the product as the pilot expands.
Current application controls
- Verified email accounts and authenticated sessions.
- Company workspace membership separated from account registration.
- Role-based company and project permissions.
- Database row-level security for company/project boundaries.
- Private project document storage with short-lived signed access URLs.
- Server-side authorization before AI document analysis.
- Audit records for team-access changes and append-only project discussions.
- Human confirmation for AI-generated corrections and official-status safeguards.
Important limits
This page is a product security overview, not a SOC 2, ISO 27001, penetration-test, or compliance certification. No system is completely secure. Customers should avoid uploading information unnecessary for the workflow and should promptly revoke access for departed or unauthorized users.
Report a security issue
Use the Contact page and select Security issue. Do not include sensitive exploit details in a public forum.