General privacy and data questions

Where your data lives

• Customer data — stored in encrypted-at-rest Postgres in our US-East region (or EU-West for Enterprise customers who request EU residency).
• Documents (Accessible Docs) — encrypted in S3-compatible storage in the same region as your account.
• Logs — retained for 30 days, then aggregated and anonymized.

What we do with your data

• Use it to deliver the service. That's it.
• We don't sell data, ever.
• We don't train AI models on your data without explicit opt-in (off by default for everyone).

Subprocessors

Stripe (billing), AWS (hosting), Sentry (error tracking), Anthropic and OpenAI (AI features). Full list and DPAs available on our Trust page.

How to export

• Scan reports — PDF or CSV per scan from the report page.
• Documents — download remediated and original copies from Accessible Docs.
• Audit log — CSV export from Settings → Audit log.
• Everything else — contact support for a full account export. We deliver within 30 days for any reason, faster on request.

How to delete

See deleting your account and archiving or deleting a workspace.

More

GDPR, CCPA, and other regulatory compliance details: see our Privacy Policy and DPA.