How we protect your data
Two kinds of tools
Every tool shows where your data is processed.
- In your browser: all the work happens on your device. Your files and entries are never sent to us.
- Secure processing: a few tools need a server, for example to read text from a scanned statement. These follow the rules below.
Encrypted in transit
Every connection to SignOffAI uses HTTPS with modern TLS. Connections between our own services are encrypted too.
Encrypted at rest
Stored data is encrypted by our hosting providers, and documents are encrypted again with a key that belongs to your organization.
Isolated processing in Canada
Server-side work runs in Canada, in a separate, locked-down environment. Each job runs on its own, with no access to other customers' files. Your files are deleted when the job ends, and results within 24 hours.
We don't train on your data
We only use processing providers that do not train on customer data.
You stay in control
You can delete your documents and your account at any time.
Service providers
| Provider | Purpose | Data | Region | Retention | Encryption | Contract |
|---|
Confirm each provider's encryption at rest and data region before using it.