Private by default
Company workspaces and document storage are not public. Access is tied to authenticated users and explicit organization roles.
Least-privilege access
Database row-level security and service-only operations limit each user and system component to the information it needs.
Protected processing
Uploads are quarantined and malware-scanned before processing. AI workflows are scoped, evidence-bound, and designed to resist prompt injection.
How we protect your data
Encryption and transport
Exit Ready uses HTTPS for data in transit. Production databases, object storage, and backups are encrypted at rest by our infrastructure providers.
Identity and account security
We support secure email/password access and configured identity providers. Sensitive production credentials are restricted to the production environment, and administrative access is limited.
Workspace isolation
Organization roles, database policies, and private storage controls are used to keep one company’s information separate from another’s. Adviser and broker access must be explicitly granted.
Document handling
Files are uploaded into private storage. New documents pass through a quarantine and malware-screening workflow before they are made available for downstream processing.
AI-assisted analysis
AI is used to help identify gaps, risks, and opportunities. Processing is constrained to authorized documents and structured tasks. AI output is informational and must be reviewed by the customer and their professional advisers.
Retention and deletion
Unless an Archive plan or legal obligation applies, cancelled workspaces enter a 90-day deletion period. Active data is then removed; encrypted whole-database backups may persist for up to 30 additional days while snapshots age out. Archive is designed for seven-year read-only retention.
Responsible disclosure
If you believe you have identified a security issue, do not include confidential customer information in an initial report. Use the secure business contact channel through which you received access and clearly mark the message “Security.”
Questions about security?
We are happy to explain the controls that apply to your workspace and due-diligence process.