Trust and security

• Sign-in

  You sign in with a one-time code sent to your email, or with your Google or Microsoft account. There is no password to be stolen or reused.

• Sessions

  Sessions expire on their own and can be revoked, so a lost laptop or a departed colleague does not keep an open door.

• Projects

  A project is private to its owner until it is shared. Sharing is by invitation, with a view or an edit role, or to everyone in your firm. Belonging to a firm never grants access to a project on its own.

• Your documents

  Uploaded documents are stored with our AI provider's file service and indexed for search. They are used only to answer your questions. They are not used to train models.

• Deletion

  Deleting a project or an account removes its documents from the AI provider and from file storage, as well as from AEC Assistant.

• Actions need approval

  The assistant asks before it takes any action that changes project data. Nothing is renamed, moved or removed without your say-so.

• Infrastructure

  The platform runs on Cloudflare's edge network, with data replicated for durability.

• Payments

  Payments are handled by Lemon Squeezy. We never hold card numbers.

• Every answer cites its source

  An answer names the clause, table or document it relied on, and the citation opens the source, so what the assistant says can be checked against what the Code says.

Questions about any of this, or a security questionnaire to fill in?Contact usand a person will answer.