Your contract stays in your control.

Before your team uploads a single page, here is exactly what we hold, what we never see, and who can see it.

Start a Security Review
The short answer

We read what you upload. Nothing else.

What we never do
  • Use your documents to train AI
  • Send your documents to a public AI serviceEverything runs in your own private space in our cloud, or inside your own private cloud.
  • Keep your documents after the work is doneDeleted within 30 days of the engagement ending, backups within 60. Sooner if you ask.
  • Ask for logins to your ERP, accounting or project systems
  • Share your documents with another customer
  • Contact your client
What we work with
  • The documents you upload
  • The review we produce from them
  • Your team's decisions on each finding

Only what you choose to send. Nothing else.

Where it lives

You choose where your documents are kept.

Whichever you pick, nothing you upload is processed on a public service, and no other customer’s data is ever mixed with yours.

Our cloud

Your data sits in your own private space. Nothing is pooled with another customer's.

Your cloud

We deploy inside your own cloud account, so the documents never leave it.

Kept apart

Your documents are never pooled with another customer's, and never used for another contractor's benefit.

Who can see what

The controls your IT team will ask about.

Access

Least-privilege by default, with single sign-on through Okta, Azure AD or SAML.

Encryption

Your documents are encrypted in transit and at rest.

Audit trail

Key actions are logged, and the log is available to you on request.

Certified

SOC 2 Type II and ISO 27001. Reports shared under NDA as part of your security review.

Retention

By default, deleted within 30 days of the engagement ending and from backups within 60. Sooner on request, confirmed in writing.

Your data, your format

Export the whole register as XLSX, PDF or CSV whenever you want it.

Your security review

Your security team asks. We answer within five business days.

NDA first. Then your vendor questionnaire, answered within five business days, with supporting documentation.

01We sign your NDA
02You send your security questionnaire
03We answer it within five business days
04Your team decides, before any project data moves
When you're ready

Start with one project.

Once your review is done, upload one live bid, active job or closing project. Nothing else changes on your side.

No implementation. Start with the records you already have.