How we protect your data

1. Encryption

This website and application are served only over encrypted HTTPS connections, and browsers are instructed to use nothing else. Stored forms, saved history and export files are encrypted at rest.

2. Separation between customers

Each customer’s data is kept apart from every other customer’s. The application reads and writes only the workspace of the person who is signed in, and an automated check guards this on every code change.

3. AI processing

We never use customer data to train AI models. AI processing runs in our own Amazon Web Services account with zero data retention: what you submit is processed and then discarded. It is never stored, never used for model training, never shared with any model provider, and no human has access to it.

4. How long data is kept

Working data you did not choose to save is short-lived by default. Saved history is a permanent record until you delete it.

• Saved filing history: Kept until you delete it. Deletion removes the document, its prior versions and the underlying record.
• Forms and export files you did not save: Deleted automatically after 30 days. Footnote suggestion working data is deleted after 24 hours.
• Job and export records: Deleted automatically after 90 days.
• Application logs: Kept for 365 days.
• Draft-form disclaimer acknowledgements: Kept for seven years, because they are the record of a legal acknowledgement.

5. Subprocessors

These service providers process customer data on our behalf:

• Clerk: Sign-in and account management.
• Supabase: The application database.
• Amazon Web Services: Storage of forms and files, backend hosting, application logs, email, and AI processing.
• Vercel: Hosting for this website.

6. Deletion on request

On a verified request, we delete a customer’s workspace within 30 days: its saved forms, working files and database records. We keep only the legal records described above (disclaimer acknowledgements, acceptances of our Terms and Privacy Policy) and a record that the deletion took place. Prior file versions are purged within 30 days, and application logs expire on their normal 365-day schedule.

7. Automated checks

Automated checks run on every code change and fail it if a new way into the system is undeclared or unprotected, if customer data could cross between workspaces, if data could be sent to an unapproved destination, or if a secret or a dependency with a known serious vulnerability is added.

8. Certification and the detailed package

We do not hold a security framework certification yet. A detailed security package, covering our access controls, separation between customers, automated checks and AI data retention evidence, is available under NDA.