The Zero-Leak Guarantee
Your suspension settings, ECU maps, and race intelligence are your competitive advantage. Here's exactly how we protect them.
The Real Risk in Motorsport Data
Multi-tenant SaaS platforms are a honeypot. Without database-level isolation, a single misconfigured query can expose every team's setup data to every other team. We built the three fail-safes below specifically to make that impossible.
Three Fail-Safes
Firewall-Level Team Isolation
The Threat
“Your competitor hacks the platform — they read your ECU maps.”
The Fix
Every query is scoped to your team ID at the database row level. No cross-team query can execute — not through the API, not through the AI, not through any endpoint. A rival team's account literally cannot reach your rows.
Implemented via md_team_members row-level scoping on every Neon query across all API routes.
Firewalled AI Data Silos
The Threat
“The AI assistant leaks your setup data to another team's query.”
The Fix
MD Intel performs RAG retrieval scoped exclusively to your team's session history before it reaches the model. The AI is injected only with your data. Prompt injection attempts are sanitized server-side before the model ever sees them.
Factory Rig tier gets a dedicated Opus-powered AI silo — your data never enters a shared context.
Zero Raw Exposure
The Threat
“A leaked API response exposes your full setup history as JSON.”
The Fix
API routes return only the fields the UI needs — no raw session dumps, no full table exports through client-facing endpoints. The AI is instructed never to reveal its raw JSON context. File uploads are validated for type and size before reaching the model.
All uploads capped at 10 MB, JPEG/PNG/WebP/HEIC only. Auth checked on every write route.
What You Can Count On
Every API read/write scoped to your team — no wildcard queries
AI retrieval firewalled to your data before model inference
Prompt injection sanitized server-side on every MD Intel request
File uploads validated for type (image only) and size (10 MB max)
Paywall enforced server-side — unauthenticated users cannot reach your data
Powered by Neon Postgres with row-level isolation, not a shared NoSQL store
Backed and monitored by Chiller Tech Support LLC — 24/7 trackside coverage on Factory Rig
Enterprise-grade security provided by Chiller Tech Support LLC
Get Protected