Private storage
Original plans and deliverables live in private buckets. Source downloads use ownership-checked links that expire after five minutes.
Security and privacy
Your plans are customer data, not public content.
Cuadrabot separates browser access, application authority, processing credentials, and administrative controls around private project files.
Short-lived access
Workers and customers receive signed URLs for a limited purpose and time; buckets are never public.
Server-only secrets
Stripe, Supabase service, worker, and processing credentials never use public browser variables.
Tenant data controls
Customer reads are limited by row-level security. Trusted service writes use narrowly scoped server code and audited RPCs.
Verified administration
Admin access requires an authenticated profile role; sensitive changes are recorded in the audit log.
Archive and retention
Verified originals have a checksum-backed database record and protected source archive. Generated files, account closure, and deletion requests follow separate controls.
Data-use commitment
Service use
Plans are processed to provide the ordered takeoff, operate validation, deliver files, resolve support, prevent abuse, and meet legal obligations.
No silent model training
Cuadrabot does not use customer plans to train its own models without separate, explicit consent.
See one real legend-based sheet counted free.
Upload a PDF with a readable legend, pick one scope, and receive in hours the same annotated plan and quantity workbook used for paid work.
Check my plans free