Security at Eudoxic
Your documents contain sensitive information. Here is how we protect them.
Last updated: April 11, 2026
Encryption
Your documents are encrypted in transit with TLS 1.2+ and at rest with AES-256 encryption. Both our database (Neon Postgres) and file storage (Vercel Blob) encrypt all data at rest automatically.
Access Control
Only you can access your documents through the application. There are no application-level admin panels or support tools that display your file contents — this is enforced by design and verified by code audit. Our infrastructure providers (Vercel and Neon) may have access to underlying storage and databases as part of their operations; their access is governed by their respective SOC 2 Type II programs, which include logical access controls, audit logging, and least-privilege policies. Every server action verifies your identity and ownership before returning data.
Data Handling
Documents are processed securely for AI extraction. Document text is sent to Anthropic (Claude) for extraction and to OpenAI for embedding generation. Per their current API data usage policies: Anthropic may retain API inputs and outputs for up to 7 days for safety monitoring; OpenAI may retain API inputs for up to 30 days. Both providers represent that API data is not used for model training under their default API terms. Data processing agreements (DPAs) with our AI and infrastructure providers are incorporated into their respective commercial terms.
Deletion
Delete your documents anytime with a single click. We perform hard deletes. Your files are permanently removed from our active database and file storage immediately upon your request. Note: our database provider (Neon) retains encrypted point-in-time recovery snapshots for up to 6 hours for disaster recovery; we do not voluntarily restore individual documents from these backups. Previously processed data sent to AI providers (Anthropic, OpenAI) may be retained per the windows described in the Data Handling section above. See our Privacy Policy for full retention details.
Infrastructure
Hosted on Vercel (SOC 2 Type II compliant) with Neon Postgres (SOC 2 Type II compliant). All infrastructure runs on major cloud providers with enterprise-grade physical and network security.
Questions?
If you have security questions or want to report a vulnerability, contact us at security@eudoxic.ai.