Security & data

What is true today. And what is being built.

Advocates will paste privileged facts into this product. The posture is described as it is, including the parts still being built.

The posture. True today.

Mumbai, at rest

Compute runs in Mumbai and the database is in Mumbai. Your matters, memos and document extracts are stored at rest only there.

Your matters are yours

Every account sees only its own matters and documents, enforced in the application on every request. Database-level row policies are the next phase.

Documents

The extract is indexed for your matter and the original file is deleted from storage.

Sessions

Verified against the authentication server on every request. Cross-site requests are refused first.

Keys

The browser holds only a public key; the secrets stay on the server.

What leaves Mumbai. And why.

To produce a memo, the text of your query, the retrieved passages and any attached document are sent to third-party language-model providers whose infrastructure is outside India. The server sends it, never your browser, and the response is checked before you see it.

There are no zero-retention agreements with those providers yet. Until there are, their standard terms govern what they retain. Please do not upload confidential client material during the beta.

Being built

Zero-retention terms with model providersComing

Database-enforced row policies on mattersComing

An access log of who read which matterComing

A retention schedule and self-service erasureComing

An independent security reviewComing

Every claim here corresponds to something in the running system. When an item moves from the second list to the first, this page changes the same day.