Security and data handling

Illustrations contain your clients' names, ages and health classes. This page describes what we do with them, so you can include it in your own vendor due diligence.

Separation

Every account's data is stored under its own organization. Every database query in our code is filtered by organization, and requests for another organization's data return "not found".

Storage

Original PDFs are kept in private storage, encrypted at rest by our cloud provider, and are never publicly reachable. Pages are served only over HTTPS.

AI processing

Only illustrations from carriers our rules don't recognize are sent to an AI model, and only the text of the pages needed to locate the figures. We use Anthropic's commercial API, whose terms do not allow customer data to be used for model training. Each account and the whole service have daily limits on AI use.

Deletion

Deleting a case removes its illustrations and reports from your account immediately. Deleted files and extracted data are permanently erased within 30 days. You can delete your whole account from Settings.

Access and logging

Sign-in uses one-time email codes or Google. Uploads, report exports, settings changes and deletions are recorded in an audit log.

Product analytics

We count product events such as "case created" or "report exported" to improve the service. These events never include client names, figures or file contents.

Need a security questionnaire or a data processing addendum for your agency or BGA? Ask us; we'll send what we have.