Frequently asked questions
Can’t find what you need? Write to [email protected].
Is my data used to train AI models?
No. Our agreements with every model provider prohibit training on your documents, prompts or outputs, and set zero data retention.
Where is my data stored?
Documents and case data are stored in the European Union. The subprocessors list shows where each provider processes data.
Who can see my cases?
Nobody by default. A small number of named engineers can reach production for operations, with MFA and every access logged. We look at case data only to provide support you have asked for.
How do I get the SOC 2 report or complete a security questionnaire?
Choose Request documents and tell us which ones you need. Most requests are answered within one business day, under NDA where the document requires it.
What does "Continuously monitoring" mean?
The controls behind the framework are in place and continuously monitored against its criteria, and evidence is being collected for the independent audit.
How do I report a security issue?
Email [email protected]. See the responsible disclosure policy for scope and our commitments.
Can I delete my data?
Yes. Deleting a case removes it immediately, and it leaves our backups within 35 days. Cases under legal hold are kept until the hold is released.