Where is the data hosted?
Sydney compute (Vercel pinned to syd1), Sydney database (Neon, aws-ap-southeast-2), and APAC object storage (Cloudflare R2). The AI step runs in the United States; every prompt goes through pattern-based PII redaction before it leaves Australia. Defence-classified material gates the AI step entirely.
What about classification handling?
The defence pack supports four classifications: UNCLASSIFIED, OFFICIAL, OFFICIAL_SENSITIVE, and PROTECTED. Each item records its classification on the record itself; classified items gate the AI step. The PROTECTED enclave is on the Enterprise roadmap; current single-tenant deployment supports OFFICIAL and below.
What encryption do you use?
At rest: Postgres TDE on Neon's storage tier; R2 server-side encryption per object. Application-level KEK wraps signing keys and API tokens; the KEK lives in a managed encrypted environment. In transit: TLS 1.2+, HSTS one-year max-age with includeSubDomains. Signing keys rotate quarterly with chained signatures so the chain of trust survives rotation.
How does custom pricing work?
Enterprise is tailored. Talk to us about custom limits (above 1,000 projects), reserved-region deployments, and SOC 2 / IRAP path engagement. Mid-market customers usually fit comfortably inside Pro; we'll say so if you do.
What about contract length?
Month to month for Starter and Pro. No annual commitment, cancel any time. Enterprise contracts run 12 months by default; longer terms available with appropriate discount.
How do we get our data out if we leave?
Every project carries CSV, PDF, and (Pro and above) DOCX and ZIP exports. The audit-trail ZIP includes proof bundles for every anchored event with the chain receipts attached. Tracked commitments export as JSON via the API. Account closure executes the right-to-erasure flow on personal data while preserving the anchored proof chain.
Who owns the atoms extracted from our documents?
You do. The documents you upload live in your account; the structured data we pull out of them (we call them atoms internally; on the public surface, commitments) is derivative of those documents. Both are exportable. We use Anthropic's API for the extraction step; their terms govern data handling on the AI side.
What's actually free during the trial?
The full plan you signed up for. No card required at signup, no feature gating during trial. After the trial ends, the project enters read-only until you start the subscription or export your data.