What we can say today about security and data
This page lists only the controls that are live in the pilot today
your data
How your data is handled
- Encrypted in transit and at rest.
- Never used to train a model.
- Your uploads are searched only for your account, beside the public corpus.
- Do not upload confidential material during the pilot.
- Only your account can analyse your document whole.
- Document text goes to our model and search providers.
- Delete your documents or your account at any time.
controls in place
What is live
- The policy gate refuses advice the record cannot support.
- Security headers, a content security policy and origin checks.
- Rate limits on the advisor, uploads and the contact form.
- A published security.txt for reporting vulnerabilities.
- A cookie notice on first visit.
what we hold to
The lines we stand behind
- The corpus
- Built on published literature, public agency records and anonymised field experience.
- No operator names, well identifiers, or re identifiable cost data.
- No vendor pays for placement or influences a materials recommendation.
- Your data
- Your field data never trains anything, and your uploads are searched only for your account.
- The call
- Recommendations support engineering judgement.
- They do not replace it, and they do not certify anything.
- The engineer of record signs.
If a control is not listed above, it is not in place.
Ask a security question