Security, privacy and your documents

• Uploads are stored in a private bucket that is not publicly readable and has no shareable link.
• Access is scoped to the account that created the report and enforced at the database level, not just in the interface.
• Reports, findings and citations are readable only by the account that created them.
• Nothing you upload becomes public, and your documents are never used to train models.

Once a report reaches a final state, its source files are scheduled for deletion 24 hours later. A scheduled job removes the stored bytes and redacts the extracted text. Because the job runs on an interval, deletion happens shortly after that window rather than at an exact second, which is why the wording is "typically within 24 hours".

After deletion your report is still readable and still verifiable, because verification uses fingerprints rather than copies of your files. The privacy and data retention page lists each class of data and how long it is kept.

• Delete a report at any time, which removes its data, its PDF and any remaining source files.
• Export your account and report metadata from account settings.
• Delete your account, which removes reports, findings, citations, payment rows, certificate records and your sign-in identity. Verification links for those reports then stop resolving.

TraceFolio uses a small number of third-party services: hosting, private storage and authentication, the analysis model, text recognition for scanned pages, certification, payments and transactional email. Each one, and exactly what it receives, is listed on the subprocessors page.

Certification is the one worth repeating: it receives one-way fingerprints and processing details only. That is enough to prove the link between your inputs and your report, and not enough to reconstruct anything about their contents.

Card details are entered on the payment provider's hosted checkout and are never seen or stored by TraceFolio. Only the amount, currency, tier, status and the provider's identifiers are stored, so a receipt can be shown and access to the report confirmed.

Operational logs record processing stages, safe error codes and cost metrics. They do not contain evidence text, quoted excerpts or report content.