Trust
How we handle the data you put in.
Where it lives, who can reach it, what gets written down, and what we have not finished yet. No badges we have not earned.
Sign in your way
Google or Microsoft sign-in, passkeys, or a password with two-factor — on every plan.
Permissions that mean something
Roles you define, scoped to your own records, your team, or everything. The AI inherits the permissions of whoever asked and can be given fewer, never more.
Everything is on the record
A history of every change — who, when, and the full input and output of each action, chained daily so a later edit shows. People and AI are recorded identically.
Encrypted where it matters
Credentials for the services you connect — email, payments, storage, AI providers — are encrypted at rest, not stored in the clear.
Your data leaves when you do
Export your lists to CSV at any time. Ask us to delete your workspace and we do it permanently within 30 days.
Built for privacy law
Data-deletion requests honoured within 30 days, hosting in the EU, and a published DPA and sub-processor list.
What we have, and what we do not.
HIPAA mode is available today, and we review a BAA with you before you store health data. SOC 2 Type II is in progress, and we will say so until it is not. ISO 27001 is being evaluated. We would rather lose a deal than win one on a badge we have not earned.
Where is our data stored?
In the EU. Tell us your requirement and we will confirm exactly which services touch your data and where.Can we get a security-review packet?
Yes — the sub-processor list, the DPA and our security overview, within one business day of asking. If you need a HIPAA BAA, we review it with you.What happens if there is an incident?
You hear from us directly, with what happened, what was affected and what we did — not a status page you have to go looking for.Can the AI see things our staff cannot?
No. It operates with the permissions of the person who asked, and can be restricted further. It cannot open a record that person could not open themselves.