Compliance
Where we stand today, and what's on the roadmap.
In place today
Data encryption
TLS 1.2+ in transit, AES-256 at rest across all storage (S3, DynamoDB).
Data residency
All customer data is stored and processed in AWS US regions.
Access controls & audit
Role-based access control with a complete, immutable audit log of every action in your organization.
Data deletion
Self-service document deletion, trial data auto-purged within 48 hours, full account deletion on request.
Subprocessor commitments
AI and OCR subprocessors (Anthropic, AWS) are contractually prohibited from training on customer content.
On the roadmap
SOC 2 Type II
Audit preparation in progress.
HIPAA (BAA)
Available for Enterprise customers on request.
GDPR DPA
Data processing agreement available for EU customers on request.
Need a security questionnaire completed or a specific agreement? Contact us.