Security

It runs in our own cloud — not a third party's

Leap Past runs inside our own Amazon Web Services account. The application, the database, and the AI all live in that boundary. For the proprietary tier, a customer can run on their own isolated database — or their own AWS account entirely — so nothing is shared.

Your data is isolated from every other company

Every record is tagged with your company and is invisible to any other company on the platform. Cross-company access requests return HTTP 404 and cross-company tokens are rejected on every request — including uploaded photos, which can't be fetched by guessing filenames. One company can never see another's data.

The AI never leaves your boundary

Answers are produced either by open-source models on our own server or by Claude via AWS Bedrock inside the AWS account — never by an external LLM vendor's shared API. Your questions and documents are not used to train anyone else's model, including ours. The server is built to refuse to start if configured with any other kind of provider.

Encryption & passwords

All traffic is encrypted in transit with TLS 1.2+. Passwords are never stored in plain text — only as bcrypt hashes — so no one, including us, can read them. Administrators can turn on two-factor authentication (TOTP) for their accounts.

Accounts & access

Access is role-based and scoped to your company. Repeated failed logins lock the account for a cooldown window to stop brute-force attempts, and sessions can be revoked. Significant actions are written to an audit log kept inside your company's tenant.

Backups & durability

The database is hosted on Amazon RDS, a managed service with automated daily backups and point-in-time recovery, so your knowledge survives hardware failure and mistakes.

Ongoing review

We run regular internal security reviews of tenant isolation and common web risks before shipping changes. Found a potential issue? Please tell us at hello@leappast.com — we take reports seriously and will work with you.

Questions

Doing security diligence before you buy? We're happy to walk your team through the details — email hello@leappast.com.