Security
Know who can open the work
and what happens to your content.
Each workspace is a separate boundary that only its members can access. Below are the controls and commitments a security reviewer asks about first, with links to the Terms of Service and Privacy Policy behind them.
Controls and commitments
What your security review will find.
- A separate boundary for each workspace
- Every workspace is its own boundary. Only the people who are members of a workspace can access it.
- Roles, including view-only
- Members join a workspace with a role. View-only members can read the work without editing it, which suits executives and outside advisers.
- Viewers limited to selected folders
- A view-only member can be limited to selected folders, so an adviser on one workstream is given the folders that workstream needs.
- Share links that expire
- When you share a document by link, the link expires. A deliverable sent outside the team does not stay open indefinitely.
- Encryption, access controls, incident response
- Our Terms of Service commit us to industry-standard security procedures to safeguard your content, including encryption in transit and at rest, access controls and incident response plans.
- Deletion within 30 days of termination
- Under the Terms of Service, we delete your customer content within 30 days of termination, unless the law requires us to keep it.
- Not used to train models for other customers
- Our Privacy Policy states that we do not use your content or inputs to train AI models for other customers.
- The Excel add-in keeps the same boundary
- A linked workbook is tied to one workspace, and someone who is not a member of it is refused. How the add-in works
These are summaries. The Terms of Service and the Privacy Policy govern.
Vendor review
How a vendor review works with us.
Our team works through your security review and questionnaire with you, so your reviewers can finish before sensitive material goes into a workspace.
-
01
Bring your review
Send your security questionnaire and tell us who takes part: information security, IT, legal or procurement.
You bring: your questionnaire and reviewers -
02
We answer and walk you through
We answer the questionnaire and walk your reviewers through workspace roles, folder access for viewers and document sharing in the product.
We provide: answers and a walkthrough -
03
Set up access for the deal
Your team decides who joins the workspace, with which role, and which folders each viewer is limited to.
Result: a workspace set up for the deal team
The documents behind it
Read the commitments in full.
Data protection and deletion
Section 5.2 covers the security measures that safeguard your content. Section 10 covers deletion of customer content after termination.
Read the Terms of Service → Privacy PolicyConfidentiality and model training
Section 2 sets out our confidentiality commitment, including that your content and inputs are not used to train AI models for other customers.
Read the Privacy Policy →Bring your security questionnaire.
We will answer it and show your reviewers how roles, folder access for viewers and share links work in the product.