ContractRippleBack

Account access

Your contract analysis workspace, scoped to your account.

Projects and every nested resource are checked against your session on the server. Another account cannot read, modify, download, or attach analysis to your data, even with a known id.

  • Opaque, database-backed sessions with a seven-day lifetime.
  • Password hashes use scrypt with a unique salt; raw passwords are never stored.
  • Login, registration, comparison, and source-analysis requests are rate limited.

Sign in to ContractRipple

Your projects, contract versions, comparison history, and reports are private to your account.

Sessions use an HttpOnly, SameSite cookie. Unsafe requests also require a session-bound CSRF token. There is no email verification or password reset in this release.