Security & Data Protection
How confidential material is handled
How VentriLinks stores, isolates, and processes customer material. Each item below is enforced in the product or is a contractual term of a named provider.
Protections
No model training
Uploaded materials, prompts, and generated reports are not used to train any model. This is a contractual term of the model provider.
Per-customer isolation
Isolation is enforced at the identity, database, and storage layers. Customer material is not exposed to other accounts and is not sold.
Documents encrypted individually
Each uploaded document is sealed with a AES-256-GCM key, which is encrypted with a master Key-Encryption-Key, before it reaches storage. No administrator or Team Member is physically able to see document contents, and isolated breaches pose no threat to document security.
Single-case sessions
A session assembles context from one case only. There is no shared search index across customers.
Customer ownership
Customers retain ownership of every upload and every generated artifact. Cases, documents, and data-room files can be deleted in the product.
Two providers
Customer content is stored by Supabase and processed by Anthropic, each with its own third-party attestations. No other provider receives customer content.
Providers
Customer content is stored by Supabase and processed by Anthropic. Each holds its own third-party attestations. No other provider receives customer content.
Review questions
Vendor questionnaires, the DPA, and the SOC 2 summary are handled through the security contact.
Ask a questionHow is customer data isolated from other customers?
Every query is bound to the owning account by a signed token. Each table holding customer content — cases, documents, data-room files, transcripts, and reports — enforces owner-only access at the database layer.
Uploaded files are stored encrypted in a private bucket under a per-user namespace. They are served only through the application, which verifies ownership on each request. There are no public or shared storage links.
Is customer data used to train AI models?
No. Processing runs under Anthropic’s commercial terms, which prohibit training on customer inputs and outputs.
Which AI models process customer content?
Anthropic’s Claude models only. Anthropic holds SOC 2 Type II, ISO 27001, and ISO 42001 certifications, and offers HIPAA Business Associate Agreements.
Provider retention windows are short and exclude training. Zero-retention processing is being enabled.
Where is customer data hosted and how is it encrypted?
Supabase provides managed PostgreSQL, authentication, and private object storage, with encryption at rest. All traffic uses TLS. Administrative access is limited and logged.
Uploaded documents carry a second layer. Each is sealed with its own AES-256-GCM key before it leaves the application, and that key is wrapped by a master key held outside the database. Each file is bound to its account and path, so a stored file cannot be moved between accounts and still open. A database copy, or access to the storage console, yields ciphertext. Attachment copies retained in transcripts for replay are sealed the same way.
This is encryption at rest, not end-to-end encryption. The application holds the key and decrypts a document to display it and to run the analysis.
Does the shared knowledge base contain customer uploads?
No. The knowledge graph is built from public sources: regulatory filings, clinical-trial registries, patents, grants, and scientific literature.
A fact requires a public, verifiable source before it enters the graph. Content derived solely from customer uploads is not written to it.
Can customer data be deleted?
Cases, documents, and data-room files can be deleted in the product. Deletion of an account and all associated content can be requested through the security contact.
What compliance documentation is available?
A VentriLinks SOC 2 Type II examination is underway; a summary is available under NDA. A DPA and security addendum are available on request.