How data is kept
Where your documents sit, who can read them, and what is sent to an AI model and when. Said from what the product does.
Where your documents are kept
- In a private area on our servers that is never served over the web. A file is read back only through the app, after the server has checked that the person asking is on the account that owns it.
- The library takes PDF, DOCX, DOC, RTF, TXT, MD, CSV, JSON, XLSX, XLS, PPTX, PNG, JPG and JPEG. Anything else is refused by name and nothing is kept.
- Shop holds 250 files or 1 GB. Pro holds 1,000 files or 5 GB. Capture holds 5,000 files or 20 GB. Enterprise holds 25,000 files or 50 GB. One file can be up to 50 MB.
- You can delete any document at any time. When an account is closed, its documents are deleted.
Who can read them
What you upload or enter belongs to your account. The people who hold a seat on it can read it, and what a seat can change depends on its role: a member works in the account, a viewer reads and changes nothing, and a manager also invites and removes seats. The owner can define roles of the account's own and close whole systems to a role or to a single seat. Access control says how.
Nobody on another account can read any of it, and none of it is counted into any figure this site or the app publishes.
What goes to an AI model, and when
Only when somebody asks. A reading is sent the question and the facts on the screen it is about. On your own pursuit, bid, contract or books that includes what you entered there, because that is what was asked about. Your account details are not sent, and a reading is never sent a document from your library.
AI writing in a proposal draft is optional, and it is off until the owner or a manager of the account turns it on. When it is on, one press of "Write this part from my passages" sends the requirement sentences of that part, the passages of your own documents shown under them, and your company name. The file is never sent, and neither is its name.
AI in Agreements is optional too, and it is off until the owner or a manager of the account turns it on. When it is on, one press sends the text of the agreement it is about, or for a question across agreements only the passages that match it, with the question and your company name. A restricted agreement is sent only when the person asking may read it.
We do not use anything you type, watch, save or upload to train a model.
On the way, and where it is stored
- Every page and every request is encrypted between your browser and our server.
- Your password is stored as a hash, never as the password itself. Your card is held by the payment processor, and we do not store card numbers.
- The key behind your two-step sign-in is stored sealed, so a copy of the database alone does not give it back. An AI key of your own is encrypted before it is stored, with a key kept apart from the data.
- A copy of your account and your work is taken every night and locked with AES-256 before it is kept. Backups says how.
Controlled unclassified information
Do not upload controlled unclassified information (CUI) to the document library, and do not type it into a record. The service does not yet meet the rules for holding it.
The rest of the Trust Portal
- Trust PortalWhat is true today, in one list.
- Access controlRoles, two-step sign-in, sessions and the account history.
- Backups and their encryptionWhat the nightly copy holds and how it is locked.
- Incident responseWhat we do when member data may have been reached.
- Vulnerability disclosureHow to report a weakness, and what is in scope.
- Outside servicesThe kinds of service that touch member data.
- Security questionnaireAsk for it, under a non-disclosure agreement.
- Security and privacyThe whole of what is stored, in one page.