Your clout is powerful. We protect it.
clout.ing is built on encryption, least-privilege access, and continuous AI security monitoring by Blaick.ai. Your profile, your capitals, and your matches stay yours.
How we secure your data
Encrypted end-to-end
All traffic is served over TLS 1.3. Profile data, capital scores, and match history are encrypted at rest using AES-256 managed keys.
Least-privilege access
Row-level security scopes every read and write to the authenticated user. No engineer queries production data without an audited, time-boxed grant.
You own your clout
You choose which capitals are visible, to whom, and for how long. Revoke a match or delete your profile and we purge derived data within 30 days.
Hardened infrastructure
Runs on isolated edge workers with signed deploys, dependency scanning on every build, and secrets stored in a managed vault — never in code.
Continuous AI security, not a once-a-year audit
We partner with Blaick.ai to keep clout.ing secure at the speed we ship — scanning code, watching runtime behavior, and enforcing data-handling policy on every request.
Continuous code + config scanning
Every commit and infrastructure change is analyzed by Blaick.ai for injection risks, insecure auth flows, exposed secrets, and misconfigured access policies before it ships.
AI threat detection at runtime
Blaick.ai watches production traffic for prompt-injection, credential stuffing, scraping, and anomalous capital-graph access, and can auto-quarantine suspicious sessions.
Policy-as-code compliance
Data-handling policies (retention, consent, cross-border transfer) are enforced as machine-checked rules, not PDFs — with Blaick.ai producing the audit trail on demand.
Human-in-the-loop review
High-severity Blaick.ai findings are triaged by our security team within one business day. Nothing critical ships or stays live unreviewed.
Your privacy, in plain language
- We never sell your data. Not to recruiters, not to advertisers, not to data brokers. Ever.
- You control visibility per capital. Show Economic to investors, Spiritual only to mutual matches, Health to no one — your call.
- Delete means delete. One tap removes your profile, matches, and derived capital graph within 30 days across primary and backup systems.
- Transparent AI use. Matching and leverage suggestions use AI on your profile data only. Blaick.ai monitors those systems for misuse and drift.
Report a vulnerability
Found something? Email security@clout.ing. Reports are triaged with Blaick.ai within one business day.