Security & trust
Built to be checked.
A compliance tool is only as trustworthy as its sources and its handling of your work. Here's how DC Copilot treats both.
Citation provenance
The source is the product.
Verbatim, not paraphrased
Every finding quotes the exact clause and its reference. Nothing is inferred or reworded — you read the source, not our summary of it.
Verify it yourself
Because the clause is shown in full, you can cross-check any finding against the published standard in seconds. You're never asked to take our word for it.
Versioned library
Each module is stamped with the edition and date of the standard it's drawn from, so you always know which version a finding came from.
Human-authored corpus
Requirements are hand-curated from the published source and reviewed by a domain expert before a module goes live — not auto-generated by a model.
Your data
Your drawings stay yours.
Per-account isolation
Projects and reviews are protected by database row-level security — every record is scoped to its owner, enforced at the data layer, not just in the app.
Not used to train models
Your drawings and project data are used to produce your review. They are not used to train any AI model.
Yours to delete
Delete a project and its drawings and findings go with it. Ask us and we'll remove your account data entirely.
Passwordless by default
Sign in with Google or a one-time email link — there's no password for us to store or for you to lose.
Formal security documentation and a data-processing agreement are available for practices on request — we won't claim a certification we don't hold.
The honest limit
A research tool, not a compliance certificate.
DC Copilot surfaces the clauses that apply and shows you where a design may fall short. It does not certify compliance, and it doesn't replace a qualified assessor's review or statutory sign-off. Whether a finding applies to your specific project — and what to do about it — is a professional judgement that stays with you. We built it this way on purpose: the tool does the retrieval and matching; you do the interpretation.
Responsible disclosure
Found something? Tell us.
If you believe you've found a security issue, please email us before disclosing it publicly. We'll work with you to confirm and fix it.
contact@dccopilot.co.nz