Infrastructure
Runs on secure cloud infrastructure with least-privilege access. Your files are stored in the EU; our Sub-processors page shows where each partner processes data.
Encryption
Your data is encrypted when stored and when it travels between you, us and our partners.
Access control
Only authorised staff can access customer data, protected by strong sign-in checks, and access to your files by our staff is recorded.
Application security
We review our code and systems for security problems regularly and fix what we find.
Incident response
If a data breach affects your data, we will tell you without undue delay and within the legal deadlines, and tell you what we are doing about it.
AI handling
Your documents are never used to train any AI model. Our main AI provider does not store your content. The cloud service it uses may keep content for up to 30 days to check for misuse, in the EU, reviewed only by staff in the European Economic Area. If we have to use our backup AI provider, it may keep content for up to 30 days. None of them use it for training.