How we earn the right to hold your engagement data.
Our customers trust us with sensitive commitment, SOW, and counterparty data. This page is how we show our work: honest about what's certified today versus what's in motion.
Our commitments to you
Source documents are not retained in raw form by default.
We process uploads in memory, extract the structured Promises and Receipts, and discard the source bytes unless you explicitly attach them to an engagement.
No training on your data, ever.
Our LLM providers run under zero-retention, no-training agreements. Your engagement contents are not used to train any model and are not retained beyond the immediate request.
Your data is yours.
One-click export of every Promise, Receipt, Decision, Risk, and audit-log entry. JSON and CSV. No data-hostage games.
Soft delete with 30-day recovery.
When you delete an engagement, it's recoverable for 30 days. After that it's gone for good.
Honest status reporting.
When something breaks, we say so. Postmortems for any production incident over a defined severity threshold are published.
Security posture
We're a young company. We're upfront about what's certified today versus what's in motion. The list below is honest about both.
SOC 2 Type I
Vanta program initiated. Type I audit targeted within six months of paid launch; Type II within 18 months.
Our LLM provider processes content under a zero-retention agreement. Engagement content is not retained by the model provider beyond the immediate request. Provider identity available on request for procurement and DPA purposes.
How your data is handled
Stored
•Your account email, plan, and authentication state
•Promises, Receipts, Decisions, Risks, and Chases per engagement
•Hash-chained audit log entries
•Engagement metadata and counterparty profiles
Processed in memory, not persisted
•Raw upload bytes from SOW, status email, or contract documents
•PDF, Word, Excel, and image content
•LLM request payloads
•Forwarded email attachment content
The structured engagement record persists so you have a defensible audit trail. The underlying source bytes are discarded after extraction unless you explicitly attach them to the engagement. When you delete an engagement, both are gone (subject to soft-delete).
Reliability
Uptime target
99.5%
Starter
Uptime target
99.9%
Team / Enterprise
Status page
Shipping next
BetterStack rollout post-launch
Our database is backed up daily with point-in-time recovery enabled. Email deliverability has a planned secondary path so a single-vendor outage does not take the inbound forwarding flow offline.
Your rights as a customer
Data export
One-click export of all your engagements, Promises, Receipts, and audit-log entries from your settings. JSON and CSV.
Account deletion
Delete your account from settings. Soft-delete preserves recovery for 30 days, then everything is purged.