RedactWorks
Log inStart free
Trust & Security

Your documents never train AI. And you choose who holds them.

Your documents are never used to train any AI model, and you decide how private the platform runs — from a managed tenant to a fully air-gapped server that never touches the internet.

shield_lockYour data stays yours

You choose who holds your documents.

Organizations pick how private the platform runs: from a managed tenant we operate, to infrastructure your data never leaves at all. The further down the ladder, the less you have to take on trust.

On the hosted tiers, that isn't only our word. Your documents are processed by Google Cloud's Vertex AI, which is contractually barred from using customer content to train its models. So the no-training guarantee is Google's commitment, not just ours.

We put our answer in writing: your documents are never used to train AI. On the private tiers it isn't even a policy — the data never leaves you, so training on it is impossible.

Compare deployment options arrow_forward
cloud_done

Hosted — your own isolated tenant

Never shared with another customer. Runs on Google Cloud Vertex AI under Google's Training Restriction — never used to train AI.

apartment

Your cloud — never leaves your tenant

Deploys inside your own Google Cloud project — in pilot with organizations now. Architecture, not a promise.

cloud_off

On-premise — no internet exists

Air-gapped on your hardware, with on-device AI. Nothing can leave.

policy

Designed for FERPA & HIPAA records

Detect and redact student records and PHI on any plan. Organizations in our pilot also get a signed DPA and multi-reviewer audit workflows for a formal compliance program.

What we put in writing

Proof and paperwork, not borrowed logos.

fact_check

A verification gate, shown live.

We'll show you the re-scan gate catching a leak, live, on your own sample documents.

history_edu

A DPA you can sign.

FERPA and HIPAA compliance comes from product design plus a signed data-protection agreement — not from a badge. The template is ready for your counsel.

auto_delete

Auto-delete after download.

Your original upload and every working copy are deleted on download — the moment you're done, nothing sensitive remains. Nothing stored means nothing to breach.

See the verification gate on your own documents.

Start free, no card required — run detect, review, redact, and the re-scan proof yourself.