Security

This page is a draft and is not the final security statement.

Case data is stored in the application database and the document store for the service. It is not used to train models.

Sub-processors, in draft: the identity service, email delivery, the database host, the document store, and the model provider. The list will be confirmed before public launch.

Case records are kept for the retention period configured for the organisation, then deleted. Billing records are kept. A read by an expert or an administrator is recorded.