Trust needs details. Here are ours.
A clear view of product controls, data handling and current certification status. Use this page as the starting point for your own security review.
Workspace access
Admin, Builder, Reviewer and Viewer roles separate administration, building, reviewing and reading.
Source-linked findings
Every claim keeps its source and quote, and a system fact-check reopens the source to look for it.
Cost caps
Each effort level caps what a job can use; the finished job shows what it cost. Proofline picks the models.
Human review
Actions that change another system wait for approval unless your policy allows them.
Compliance, clearly stated.
| Framework | Status | Detail |
|---|---|---|
| GDPR | Review required | Ask for the applicable data terms |
| SOC 2 Type I | Not certified | No audit report published |
| SOC 2 Type II | Not certified | No audit report published |
| ISO 27001 | Not certified | No certification claimed |
Retention is a control.
Workspace admins set retention in settings. Purges run on that schedule.
Files
Keep uploaded files for 30 days, 90 days, 1 year or 7 years.
Audit log
Kept at least 400 days, or 2 or 7 years. The log is hash-chained, so edits break the chain.
Runs and reports
Each workspace sets how long transcripts and reports are kept.
Know where the data goes.
Research runs on third-party AI models, named on the subprocessors page. Hosting services and the connectors you turn on (email providers, MCP servers) may also process workspace data. A finalized subprocessor list and contractual security pack must be confirmed before a production deployment.
Discuss your security requirements ↗An answer should survive a closer look.
Source verification and human review help identify weak evidence. Research still needs judgment; a confident answer is not a guarantee.
Inspect the source
Keep quoted evidence alongside the claim.
Question the result
Contested findings can go to a reviewer.
Keep the correction
Use better evidence in future evaluation cases.
Measure, then claim
No invented benchmark or audit score.
Start with the questions that matter.
Deployment, data handling, roles, SSO and SCIM, and contractual requirements, with a real scenario from your team.