Security

Last updated: July 26, 2026

Account Security

Trackerhound uses a dedicated authentication provider to manage sign-in and account sessions. Dashboard access requires authentication, and each authenticated user is associated with an authorized Trackerhound organization.

Tenant Separation

Trackerhound separates customer data by organization. Application access is scoped to the user’s organization, and database policies provide an additional layer of organization-level access control.

Document Access

Documents are stored in cloud object storage and accessed through time-limited signed links. Upload links are unique to a workflow and are revoked when the associated task is completed or cancelled. We limit upload file types and file size as part of the upload flow.

AI-Assisted Review

Trackerhound can use OpenAI to produce an AI-assisted review of eligible uploaded documents. To perform that review, the document and the requirements supplied for it are sent to OpenAI using a short-lived access link. AI-assisted review is designed to support, not replace, human review.

OpenAI states that data sent through its API is not used to train its models unless a customer explicitly opts in. OpenAI may retain data under its API data controls; see OpenAI’s API data controls for current details.

Third-Party Providers

We use carefully selected providers to operate Trackerhound, including providers for authentication, cloud hosting and storage, email delivery, SMS delivery, analytics, and AI-assisted review. Providers process information only as needed to provide their services to Trackerhound.

Security Monitoring and Improvement

We maintain application dependencies, review access controls, and improve our safeguards as the service evolves. No system can guarantee absolute security, and we encourage responsible reporting of potential vulnerabilities.

Report a Security Issue

If you believe you have identified a security issue, please contact Trackerhound support with enough detail for us to investigate. Please do not publicly disclose a potential issue before we have had a reasonable opportunity to assess and address it. This helps protect Trackerhound users while a fix is being prepared.