Where your documents go.

What is stored.

The PDFs your reviewer uploads, the text extracted from them, and the results of the comparisons. Storage is Supabase in its US region. Hosting is Vercel. The documents are read by Anthropic, and client data is not used to train its models.

What is refused before anything is stored.

The text of every upload is scanned before a single byte reaches storage. A file whose text matches wire instructions, account numbers, routing numbers or Social Security numbers is refused, and so is a page with no text layer. What is kept is a log entry of the refusal: the file name, the page numbers, the pattern name, the signed-in user and the time. Never the matched text.

Who can sign in.

Accounts are created for named engagement users. There is no self-service signup, and every account carries multi-factor authentication.

One engagement at a time.

The tool holds one engagement's files, and a single control wipes them: stored files and database together, with one final line written to a deletion log. Engagement data is deleted at the end of the engagement.

Every action is recorded.

Each reviewer decision — approve, dismiss, a note, a re-classification, a run of the check — is written to an audit log with the user and the time.

What this never does.

• —Wires or wire instructions
• —Disbursement or release of funds
• —Identity or fraud decisions
• —Final title or legal judgment
• —Any change to a production file without your reviewer

The check lists and cites. A person decides.