How PromptKing runs today.

Where data is held

The application is hosted on Vercel, with server functions configured to run in the Montréal region (yul1). The primary database is a Supabase project in the ca-central-1 (Canada) region.

This page covers the primary database and server functions only. It does not describe where content delivery, logs, backups or other providers process data.

We don't sit between your agent and your systems. Evidence collection is designed to stay outside the agent's execution path.

Access to data

Row-level security is enabled on all 167 tables in the application's public database schema (checked Oct 17, 2026). That check covers whether it is enabled, not whether every policy is correct.

The service-role key, which bypasses row-level security, is set only for the production environment, not for Preview deployments (checked Oct 17, 2026).

Browser protections

The site's configuration sets Strict-Transport-Security, X-Frame-Options DENY, Referrer-Policy strict-origin-when-cross-origin and a restrictive Permissions-Policy on responses. The Content-Security-Policy runs in report-only mode.

What PromptKing does not hold

PromptKing does not hold a SOC 2 report, an ISO certification or an independent security assessment. As of the last record, Oct 10, 2026, none had been completed. Certifications held by our hosting and database providers are theirs, not PromptKing's.

Reporting an issue

To report a security issue, write to info@promptking32.com.