Security and privacy
What happens to a document from upload to deletion.
No adjectives: what the system does, where it happens, and what we cannot promise.
The journey
Four moments, and what protects each one
- 01TLS 1.2+
Upload
The file travels encrypted in transit. Access is restricted to approved accounts.
- 02Fernet · AES-128
Extraction and encryption
Extracted text is encrypted in the application. The key lives only on the server, never in the database.
- 03EU only
AI analysis
Each feature sends only what it needs, under a size limit, to data centres in the EU.
- 04Your call
Review and deletion
Documents stay until you remove them. Deleting the account deletes everything, immediately. An account nobody uses for 30 days is deleted too, after a warning by email.
Measures
What the system does, every time
Isolated per account
Row-level security in the database: an account can reach only its own data.
One-hour signed links
Files are reachable only through signed links with a maximum one-hour expiry.
Content is never logged
Logs record actions, timestamps and record IDs. Never the content of a document.
Secrets stay on the server
Keys and credentials live on the server. None reaches the browser.
AI proposes, a person decides
Suggested edits are never applied on their own: each one is approved or discarded.
Rate limits
Rate limiting on uploads, comparisons, AI calls and sharing links.
AI
Your content does not train models
Not ours, not the provider’s, not any third party’s. The provider retains nothing after a request completes, and its request logging is switched off.
Allowed regions
- Ireland
- Germany
- Sweden
- France
- Italy
- Spain
Every other region is denied in the access permissions.
What we do not promise
Two limits we would rather state
No system is perfectly secure, and we do not claim otherwise.
Providers with a US parent
Data stays in EU data centres, but that alone does not put it beyond the reach of a US legal order. We keep the exposure small: the AI receives only what each feature needs, under a size limit, and stores nothing.
The review-notes email
If you send your notes from the platform, the message can include the quoted clause and is delivered by a provider in the US. It only happens when you send it, and we are moving it to an EU provider.
Can your matter not tolerate that residual risk?
Write to us before uploading material and we will work out whether the platform fits that matter.