Your money systems, checked.
Never touched.
Smoke Run watches whether your payments, signups, and follow-ups actually work. Here is how we earn the keys. Lead promise first: we can look, we cannot touch.
An illustration of how much we look, not a live total. Every read is logged in plain English and shown to you.
It is zero because the credential physically cannot write. Not a promise. A fact.
Each one is a line you can check for yourself.
No jargon, no badge theater. Plain promises, each one enforced by the shape of the access we hold, not by a policy we ask you to trust.
We can look. We cannot touch.
Every connection we ask for is read-only. We physically cannot change, delete, or move anything in Stripe, your CRM, or your email. A write request is rejected by the provider, not just discouraged by us.
We never see your passwords, and we are not a vault for your keys.
Your CRM login stays inside Nango, a managed connector that runs the OAuth and holds the token. Your Stripe key is a read-only key you create and can switch off in one click. We never store a password.
We keep the answer, not your data.
We read a transaction to check it worked, then we drop it. We keep “the checkout passed at 9am,” never your customer’s name, card, or email.
You can see every single thing we looked at.
Your dashboard shows a live log of every read we make, in plain English, any time. Next to it, one number that never moves: changes we made to your systems, zero.
Turn us off in one click, from your side.
You grant access, you revoke it. The moment you disconnect, we are locked out, with no email to us required.
Encrypted everywhere, isolated per customer.
TLS in transit, AES-256 at rest, and a separate encryption key per customer. Our connectors (Stripe, Nango, AWS) are SOC 2 Type II certified, and our own SOC 2 is underway.
We are careful on purpose. We once took a client site down by cloning a database onto a shared disk, so we would rather tell you exactly what is true today and show you the log than hand you a badge and ask you to trust it.
The scope, in one table.
There is no write scope anywhere in the detect connection. Read is the ceiling.
Every read, in plain English. Writes, zero.
The audit log is append-only and hash-chained, so tampering is detectable. You see every read we performed and the single number that never moves next to it. This is a sample of what that feed looks like.
- 09:14:02readStripe. Read your last 50 charges to check the checkout path50 read
- 09:14:03readCRM. Read contacts created in the last hour3 read
- 09:14:03readEmail. Read send-log headers for the order confirmation1 read
- 09:14:04readWebhooks. Read endpoint delivery statushealthy
We only claim what is true today.
We do not wear a certification we have not earned. Here are the companies we rely on, what they do for you, and exactly where our own audit stands.
Where our SOC 2 stands. SOC 2 Type II is underway with continuous control monitoring in place. Until the report is signed, we say exactly that, and our subprocessors above are already SOC 2 Type II certified. You can verify us with the audit log rather than trust a badge.