Your data is protected. Always.
Dedicated hub for procurement, IT, and regulatory QA, HIPAA-grade infrastructure, and 21 CFR Part 11 audit trails.
HIPAA & BAA
HIPAA-compliant infrastructure on all plans. Business Associate Agreements available for Enterprise customers handling PHI.
21 CFR Part 11
Immutable audit logs, electronic signatures, and version history for notebook entries and regulated documents.
Encryption
AES-256 at rest, TLS 1.3 in transit. End-to-end encrypted messaging with keys held on your device, we cannot read your channels.
Data residency
US regions for Enterprise. Custom retention policies and export for eDiscovery.
AI & your data
We never train models on your uploads or generations. AI chat records are deleted when you navigate away from a document.
Security packet
Procurement teams receive our architecture overview, subprocessors list, penetration-test summary, and BAA template. Request via contact sales or your account executive.
Subprocessors
Hosting (GCP), payments (Stripe), email (transactional only), and analytics (privacy-preserving, no document content). Full list ships with the security packet.