Your data,
your control.
We only say what we can stand behind today. As we add stronger protections, we'll add them here too.
Our security commitments.
Your workspace is yours alone
Every organisation's documents, chats, and reviews stay separate from every other organisation's. We verify who you are on every request, and the database enforces the same boundary on its own, so access to another customer's data is refused at both layers. We also run an automated check whenever we change the system, so no new part of it can ship without that protection.
Encrypted in transit and at rest
Your connection is encrypted while data travels, and your data is encrypted where we store it.
You own your data
You own everything you upload and create. We don't sell it, share it, or mine it.
Nothing leaves your browser until you send it
Your document isn't uploaded or processed until you choose to send it. Nothing syncs in the background.
We don't train AI models on your documents
We use your documents to run your reviews, and nothing else. We don't train AI models on them.
We check our own security
We test our access controls and customer isolation automatically each time we ship a change. When those tests, or an outside report, flag something, we fix it.
Built on trusted cloud infrastructure
We run on established cloud infrastructure with encryption and access controls. We also rate-limit traffic and screen anonymous sign-ups to keep automated abuse out.
Coming next.
Delete your documents yourself
Delete your documents yourself, with a receipt that confirms they're gone.
Published retention timelines
Published timelines for how long we keep your uploads, reports, and logs.
Current outside-services list
A current list of the outside services we use and what each one handles.
Stronger sign-in options
Passkeys and two-factor sign-in.
Have a security question?
Get in touch