The questions your IT and procurement teams ask — answered plainly.

Access & protection

• Role-based access. Every user — from admin to read-only viewer — sees only what their role allows.
• Encryption. Data is encrypted in transit (HTTPS/TLS) and protected at rest.
• Audit logs. A tamper-evident record of who did what, to which record, and when — exportable for any review.
• Backups. Regular backups so your operational data is protected against loss.

Where your data lives

We take data location seriously, especially for regulated and government-adjacent customers. If you have specific data-residency requirements, talk to us early — we'll tell you exactly where your data is hosted and what options we can offer. We won't make a residency claim we can't stand behind on a hosting audit.

How our AI assistant (GREPX) uses your data

GREPX is powered by a third-party large language model. We believe you should know exactly what that means:

• When you ask GREPX a question, the relevant context needed to answer is sent to the AI provider to generate a response.
• GREPX respects the same role-based permissions as the rest of the platform — it can't surface data a user isn't allowed to see.
• GREPX is an assistant and can make mistakes. It does not replace your own checks on contracts, compliance or financial decisions.
• For the full data-processing detail — what is shared, with whom, and the legal basis — contact us and we'll walk your IT team through it.

Why we'll still be here

You're trusting a vendor with operations that matter. We're a licensed company with a physical office, a real team you can reach by phone, and customers in production today. We're not a side project — and we'd be glad to put you in touch with a reference.