Security & data
Built for the data a distributor cannot afford to leak.
Your catalog, your prices and your customers’ requests are the business. Here is where they are kept, who processes them, and what protects them — in the same terms as our privacy policy.
Northline Electric Supply
Your workspaceevery query scoped to this workspace
Where your data goes, from the request in to the draft out.
Every place your content passes through, who operates it, and where it is. All connections are encrypted in transit.
In
Forwarded email
Received for your intake address by Resend.
United States
Uploads and pastes
Sent from your browser over an encrypted connection.
API requests
Signed in with a workspace key; only its hash is stored.
Inside Goodshed
Goodshed, hosted on Vercel
Reads, matches and checks each line. Every query is scoped to your workspace.
United States; global delivery network
Database · Prisma Postgres
Your catalog, requests, drafts, tests and decisions.
United States (N. Virginia)
Claude, via Anthropic’s API
Reads requests and helps match lines. Its commercial terms do not permit training on your content.
United States
Out, to you
Exports
CSV and Excel, downloaded by your team.
Signed webhooks
HMAC-SHA256 with a timestamp, to public https addresses only.
Your API calls
Drafts read back by your own systems, with your key.
Monitoring · Better Stack
Uptime, error reports and admin security alerts. An error report may occasionally hold a fragment of the data being processed.
United States
Our inboxes · Google Workspace
Application notifications and correspondence with our team.
United States
The controls, in plain words.
Northline Electric
Catalog
Customers
Requests
Another distributor
Catalog
Customers
Requests
Every workspace kept apart
Your catalog, customers, requests and decisions belong to your workspace, and every query is scoped to it. One customer’s content is never used to provide the service to another.
Sign in to your quote desk
What is stored
scrypt · salt · hash
Never the password itself
Sign-in that resists guessing
The quote desk signs you in with your email and a password. Passwords are stored only as salted scrypt hashes, and repeated failed sign-ins are blocked — counted per email and per network address.
New API key: ERP bridge
Shown oncegs_live_3fQ9…copy it now
Every webhook delivery carries
X-Goodshed-Timestamp: 1760000000
X-Goodshed-Signature: sha256=9c1e…
API keys and webhooks, handled carefully
API keys are shown once and stored only as hashes. Every webhook is signed with HMAC-SHA256 over a timestamp and the body, so your side can check it came from your workspace and is not a replay.
Request text
500' #12 GRN, 20 QO230…
Claude API
Results back to Goodshed
- Not used to train AI models
- Never used for another customer
- Never sold
Your content never trains a model
Requests are read with Anthropic’s Claude through its API, under commercial terms that do not permit training on your content. We never use it for training ourselves, never share it between customers, and never sell it.
One control at a time.
What each safeguard is, and exactly where it applies.
__Secure-gs_app
The sign-in cookie, sent only over encrypted connections
Every connection to the site and the quote desk is encrypted. In production, sign-in cookies carry the __Secure- prefix and are sent only over encrypted connections.
Failed sign-ins are counted per email address and per network address, in the database, so the limit holds across every server. Quote-desk and admin sign-ins are counted separately.
Goodshed’s internal administration area — where our team works — requires two-step verification on every sign-in. Each code works once, and every sign-in sends an alert to our team.
Every request sent over the API runs the reader and the matcher, so each workspace has an hourly ceiling. Past it, the API answers 429 with a Retry-After header instead of running.
Delete requests and historical tests yourself at any time. For the rest, write to privacy@goodshed.ai; remaining content is deleted within 30 days of your request or departure.
The details, checked against the code.
Prisma Postgres
United States · N. Virginia
Stored in the United States
The database is Prisma Postgres in N. Virginia. Email and monitoring providers are U.S.-based too.
correct-horse-battery
scrypt$16384$8$1$Zx4…$Q9k…
Salted, one-way. Nobody can read it back.
Passwords nobody can read
Only a salted scrypt hash is kept. The password itself is never stored, so no one can read it back.
request.approved
HMAC-SHA256(secret, timestamp.body)
sha256=4be0…a17c
Signed webhooks
HMAC-SHA256 over the timestamp and the raw body, so a delivery can be verified and an old one refused.
- ✓https://erp-bridge.example.com/goodshed
- ×http://169.254.169.254/…
- ×https://10.0.0.12/hook
Public https addresses only
Webhooks go only to https addresses on the public internet — never to private or internal networks.
API keys
ERP bridgegs_live_3fQ9…
Nightly cataloggs_live_3fQ9…
Only the start is kept on view; the rest is stored as a hash.
API keys shown once
A key is shown the moment it is made, then stored only as a hash. Revoke it and it stops working.
dana@northline…Signed in
dana@northline…Wrong password
unknown@…Blocked
Short-lived sign-in records
Each sign-in attempt is recorded to secure accounts, kept for 30 days (blocked attempts for 24 hours), then removed.
Where your data lives.
The six service providers that process data for Goodshed, as listed in our privacy policy. They may use it only to provide their services to us.
| Provider | What it does for Goodshed | Where |
|---|---|---|
| Vercel | Hosting of the site and the quote desk, request logs, analytics on the marketing site, and bot protection | United States; global delivery network |
| Prisma (Prisma Postgres) | Database hosting | United States (N. Virginia) |
| Resend | Sending email, and receiving email forwarded to quote desk intake addresses | United States |
| Google Workspace | Our email inboxes, including application notifications and correspondence | United States |
| Better Stack | Uptime monitoring, error reporting and administrative security alerts | United States |
| Anthropic | Artificial intelligence processing of customer content, through Claude via its API | United States |
Error reports sent to Better Stack may occasionally contain fragments of the data being processed when an error occurred. Questions about our providers or safeguards go to our Privacy Officer, Lukas Friedman, at privacy@goodshed.ai.
Questions about security and data
Where is our data stored?
Is our content used to train AI models?
Can another distributor see our catalog, prices or customers?
Does the quote desk sign-in use two-step verification?
Who at Goodshed can see our content?
How do we get our data deleted?
Do you hold a security certification?
What happens if something goes wrong?
The last quote your team retypes by hand.
Opens the early-access application with your email filled in. See our Privacy Policy.