How we protect your documents

You choose your region at sign-up: the European Union or Australia. We detect it and you confirm it. Your files and your database records are stored in that region.

For EU customers, some account steps still run in Australia: sign-up, invitations, new projects, file preview and download links, file share links, removing a member, erasing a leaver's record content, and billing. They handle names and account details, not document text.

Our cloud providers are headquartered in the United States, so US law can require them to disclose data they hold, wherever it is stored. Storage in the EU reduces that risk but does not remove it.

Moving to another region later is a request to support. Read the full jurisdiction notice.

Inferis trains no model on your documents, questions or answers. Our AI provider states that data sent through its API is not used for model training.

To write an answer, the text relevant to your question is sent to the provider.

The provider keeps inputs and outputs for up to 30 days to detect abuse.

If the main model is unavailable, a backup model can answer. The answer is labelled as such and recorded in the audit trail with the provider and region. An administrator can switch the backup off.

Web search is on by default for workspaces created from 9 November 2026, and an administrator can switch it off. Earlier workspaces keep their setting. It sends only the question you type.

Access is controlled by role and project. Folders can be restricted. Guests see only what they are invited to.

Links to answer records expire after 30 days and can be revoked.

Inferis staff do not read your documents in the normal course. Support access to your workspace needs your administrator's approval, lasts a limited time (24 hours at most), and is logged.

In an emergency, access needs the confirmation of a second Inferis administrator, lasts 4 hours at most, and is logged.

Sign-in offers an optional authenticator-app check that each user can switch on. It is applied in the app, not yet enforced by our servers. Single sign-on is not offered yet.

Your administrator sets an automatic sign-out after 15 to 120 minutes of inactivity. Every session ends after 8 hours.

AI answers are recorded in a log that can show if an existing record was changed.

The log is hash-chained and on by default; an account administrator can switch it off. The chain heads are signed and copied to separate append-only storage. The Inferis service account cannot delete or overwrite them, and a 7-year retention rule is set on that storage (it is not locked). You can verify a record on the audit page.

Record content is encrypted with a key per person. When a person's account is erased, that key is destroyed in our live systems.

Audit records are written when an answer is produced. In rare cases a write can fail and a record may be missing; the chain detects changes to existing records, not records that were never written.

Documents and the database are encrypted at rest by our cloud provider (AES-256, keys managed by the provider) and in transit (TLS). Inferis does not offer customer-managed keys.

Pages are served over HTTPS with HSTS, and with headers that block framing and content sniffing.

A deleted file stays in the trash for 30 days, then it is purged. Remaining copies expire within a further 28 days.

When you delete your account or ask us in writing (support@inferis.ai) to delete your data, it is removed from live systems within 30 days and from backups within 35 days.

You can export your firm's files and data on every plan.

The database is exported weekly in each region, with an automatic check that the export is recent. Point-in-time recovery covers the last 7 days.

Uptime is monitored automatically and a public status page is available.

We give no availability guarantee and state no recovery time yet.

Releases are made by hand from the main branch. Automated unit tests and type checks run before code is pushed.

Automated dependency updates and security alerts run weekly.

Secrets are held in our cloud provider's secret manager and kept out of source control.

We self-assessed Inferis against OWASP ASVS Level 1 on 26 October 2026. This is our own review, not an audit.

We have a written incident response plan that covers the GDPR and the Australian notifiable-breach scheme.

We keep a register of security events, including near misses.

Customers are notified of a breach affecting their data within 48 hours of becoming aware of it.

A published data processing agreement: GDPR Article 28 terms for EU customers, and Privacy Act-aligned terms for Australian customers.

Breach notification within 48 hours of becoming aware of a breach.

Data export on every plan.

We build to the GDPR and, for Australian customers, the Privacy Act 1988 and the Notifiable Data Breaches scheme.

• Cloud hosting, storage and the backup model: in the EU for EU customers, in Australia for Australian customers, except the account steps listed under "Where your data is stored". The backup model runs in the United States for Australian customers.
• AI provider: its EU service for EU customers, its global service for Australian customers.
• Payments: handled by our payment provider through its hosted checkout.
• Email, error monitoring and the status page: each by a separate provider. Analytics and browser error monitoring load only after you accept them.

The full list is in the DPA. We give 30 days' notice of changes, and you have 14 days to object. Sub-processor list.

Inferis holds no certification of its own and has not had an independent security test.

Our hosting provider holds SOC 2 reports and ISO 27001 certification for its infrastructure. The provider's own compliance page.

We will commission an independent test when a customer requires one.

Security questions and requests: support@inferis.ai.

On request: our security overview, data protection impact assessment and questionnaire answers. We may ask for a confidentiality agreement first.

If you think you have found a vulnerability, write to support@inferis.ai with the details. Please do not access other customers' data. Our security.txt.