Skip to content
the way it works
How the product protects your data, described without certifications.
Your workspace is isolated twice overSeparation is enforced in the application layer and again in the database with row-level security. One mistake in one layer is not enough to expose another company’s data, which is the whole reason for doing it twice.
Everything cites its sourceEvery element carries whether it was stated or inferred, a confidence score, the quoted sentence, and its review state. That is a security property as much as a quality one: you can audit what the software concluded and why.
You can take everything with you, on every tierThe full record exports as JSON in an open standard, including on the free trial. Export is never a paid feature. A record you cannot remove is a record you cannot trust.
A limit reached is never data lostRunning out of credits pauses drafting and never touches reading. An expired trial or a cancelled subscription makes a workspace read-only rather than deleting it, and nothing is removed for 90 days.
You can bring your own AI accountOn the higher tiers you supply your own provider credentials, so that work runs under your organisation’s own agreement and data terms rather than ours. Consumption is shown to you and we do not bill for it.

SECURITY AND DATA HANDLING

No badges. Here is the architecture instead.

We hold no certifications yet, and we are not going to imply otherwise with a wall of logos. When an audit is done, this page will say so and name the date.

What we will not claim

We will not say we are certified when we are not, and we will not describe a roadmap item as though it shipped.

We will not publish a claim about how your documents are handled by our suppliers until we have verified it under the account terms actually in use. That verification is not finished, so the claim is not on this site. It will appear here and on the privacy page on the day it is true, and not before.

Suppliers that process data for this site.

SUPPLIER

WHAT FOR

VercelHosting and delivery for this marketing site
StripePayment processing and subscription billing
PlausibleCookieless site analytics, with no personal data and no tracking

WHO ELSE TOUCHES YOUR DATA

The full list, kept current.

We will give notice here before adding a supplier that processes customer content.

The full subprocessor list · Ask us anything not covered here

the way it works

Judge it on your own document.

The trial gives you full provenance and full export, with no card.

No credit card. Five design partner places. A person replies.