Skip to content

Unsold scripts deserve better than a shared drive

BlackSlate holds scripts that have not been sold and slates that competitors would like to see. These are the measures that protect them.

Where your data lives

Account data and your work are stored with Supabase in London (AWS eu-west-2). The providers we use, and where each one processes data, are listed on our sub-processors page.

How it is protected

  • All traffic is encrypted in transit with TLS, and data is encrypted at rest.
  • Each company's data is separated at the database level by row-level security, so one customer's queries cannot read another's records.
  • Privileged keys are used only on the server and never sent to the browser.
  • Card payments are handled by Stripe. We never see or store full card numbers.
  • Preview Links expire when you say and can be revoked at any time.

Your controls

  • Export your data, or delete your account and its data, from your account settings.
  • Invite colleagues to your company rather than sharing a login.
  • Revoke a Preview Link the moment you no longer want it open.

Reporting a vulnerability

If you find a security issue, email security@blackslate.ai with the details and steps to reproduce it. Please do not access other people's data or disrupt the service, and give us a reasonable time to fix the issue before disclosing it. Our security.txt follows the standard format.