Enterprise-Grade Security & Privacy
Your survey data deserves the highest level of protection. We've built security and GDPR-aligned privacy practices into every part of the platform.
Our Data Protection Promise
Your survey documents are processed in memory and are never written to persistent storage. Files are cleared automatically once your session ends, and only limited metadata is retained for operational purposes.
Document Content
Never written to disk; cleared automatically once processing completes
Processing Metadata
Only limited operational data is retained (file size, status, timestamps)
AI Training
Your documents and survey content are never used to train AI models
Third-Party Access
Your data is never shared with third parties beyond processing your request
Security Capabilities
Layered protection covering access, data handling, and infrastructure
Account Security & Access Control
Enterprise-grade authentication protecting every user session.
- Encrypted, token-based session management
- Automatic session timeouts and lockout after repeated failed logins
- Role-based access controls
Data Privacy & Minimization
We store as little as possible, and never your survey content.
- No survey content, question text, or file content stored in our database
- Only minimal metadata retained for operations and support
- Email addresses stored as one-way hashes, never in plain text
Encryption
Your data is encrypted both moving and at rest.
- TLS encryption for all data in transit
- Encrypted storage for any retained metadata
- No document content ever stored at rest
Input Validation & Threat Prevention
Comprehensive checks stop malicious files and inputs before they reach processing.
- File type and size validation on every upload
- Automated bot protection
- Multi-layer sanitization against injection attacks
Monitoring & Incident Response
Issues are caught early and resolved quickly.
- Continuous system and error monitoring
- Defined incident response process
- Automated backups with rapid recovery
Vendor & Infrastructure Security
Every part of our stack is vetted to the same standard we hold ourselves to.
- Infrastructure providers assessed for SOC 2, ISO 27001, and GDPR alignment
- Access-controlled repositories with automated vulnerability scanning
- Regular security patch cycles
Compliance & Regulations
Built to meet enterprise compliance requirements and international data protection standards
Your Data Rights
We respect your privacy rights and give you full control over your personal data
Right to Access
Access the personal data we hold about you in a structured, portable format.
- Complete data export on request
- Structured, machine-readable format
- Response within 30 days
Right to Erasure
Request complete deletion of your account and associated personal data.
- Full account deletion on request
- Removal from backup systems
- Confirmation once complete
Right to Rectification
Correct any inaccurate or incomplete personal information.
- Self-service account updates
- Prompt correction processing
- Confirmation of changes made
Data Portability
Receive your data in a portable format for use with other services.
- Standard, open formats
- Complete data extraction
- No restrictions on reuse
Security Questions or Concerns?
Our team is here to answer any questions about our data protection measures and compliance standards.