Where is data stored?
US-region Supabase (Postgres + Storage) and Vercel. We do not store customer COIs in India.
Who can see my vendors’ certificates?
Only members of your organization, via Postgres row-level security. CertShield staff access production only for support incidents, logged.
What AI vendor do you use?
Claude via OpenRouter for COI extraction. Model version, cost, latency, and confidence are logged per document. Temperature is 0.
Do you train models on our PDFs?
No. Extracted fields stay in your tenant. Human corrections become golden-set regression cases for accuracy testing — not public model training.
How are W-9 / TIN numbers protected?
Field-level encrypted at rest, masked in the UI (***-**-1234), visible to org Admins only, deletable on offboarding per retention policy.
Encryption?
TLS in transit; encryption at rest via our US cloud providers. API keys are hashed; portal and agent-confirm links use hashed tokens.
Backups & restore?
Daily database backups with a tested restore checklist (ops). Point-in-time recovery available via Supabase.
Subprocessors?
Vercel, Supabase/AWS (US), OpenRouter to Anthropic, Resend, Postmark, Twilio (SMS), Paddle (billing), Documenso (e-sign), Sentry (when enabled).
Deletion / export?
Litigation and audit export packs are available in-app. Full tenant deletion on written request after cancellation (retention window in Privacy Policy).
Is this legal or insurance advice?
No. Every verdict surface carries: Document review assistance — not legal, insurance, or professional advice. You remain the final approver.