What protects your documents, and what each pilot must still confirm.
Access control, private document handling, citation checks, and reviewer release are built into the product. This page states what they do, which providers see document text, and what is verified before your documents are accepted.
Current status
Built into the product and tested locally
- Customer access is scoped to a workspace (a House) in the database and in private storage.
- Files are checked on the server before any text is extracted.
- A material finding must cite an uploaded passage, or it is withheld.
- A memo stays under review until a reviewer releases it.
Recorded for each pilot before documents are accepted
- A recorded pilot agreement reference and agreed document scope.
- Two allowlisted reviewers and operator multi-factor authentication.
- Provider-privacy evidence and the retention configuration.
- A hosted-acceptance reference for the deployment.
Document intake stays closed until an operator records these items. They are receipts entered by a person, not automated certifications. This page is not a certification, an audit opinion, or a guarantee of perfect security.
Who sees document text
Drafting. In the current beta, language-model calls go directly to Anthropic under Anthropic’s standard data retention. This is not a zero-data-retention service. The product also supports routing through Vercel AI Gateway with zero data retention set on each request; that is not the mode the beta uses today.
Search. Passages are embedded and reranked by Voyage AI, and only after the organization’s training opt-out has been recorded. Missing evidence stops the call.
Recordings. Transcription goes through Vercel AI Gateway to the Grok speech-to-text model, whose endpoints are zero-retention and no-training, with zero data retention required on every request.
Model calls are scoped to one House and engagement, rate-limited, capped by a spending limit, and refused when the required provider-privacy evidence is missing. The signed pilot inventory confirms which providers apply to your engagement.
How the controls work
01
Customer-scoped access
Customer records and storage paths carry a House scope. Customer requests derive that scope from the signed-in session, not a route parameter. Row and storage policies are tested locally; the separate hosted two-House proof remains a release gate, so we do not call the boundary production-proven yet.
02
Private source handling
The pilot accepts PDF, Word, Excel, text, transcript, image, and recording files in private storage. The server validates files before extraction, records source hashes and coordinates, and gives the browser short-lived links when a source must be opened. Recordings are transcribed through AI Gateway, and every request requires zero data retention.
03
Limits on model use
External model calls are scoped to a House and engagement, rate-limited, capped, and disabled when required provider-privacy evidence is missing. It does not mean every provider offers zero data retention.
04
Citations and withholding
A material finding must resolve to an uploaded source excerpt. If the available room does not support the conclusion, the product withholds it instead of presenting it as fact.
05
Human approval and release
A completed model run creates work for a human operator to review. It does not create a customer-visible memorandum. Release requires an approved customer-visible version, and requesting changes retracts it. Cross-House review access is reserved for the configured operator allowlist and requires the deployment's MFA gate before customer use.
06
Audit and retention
The product records security- and workflow-relevant events without putting raw document text in analytics or status fields. Source records support expiry, but a pilot must not begin until the agreed retention period, deployment default, and scheduled deletion sweep have a verified operational receipt.
Security questions?
Send them before the pilot. We answer from what is built and tested today, and tell you which checks are still open.