Security & data handling
Your supplier files are sensitive. Here's how we handle them.
A plain-language summary of how the platform works today. We don't claim certifications we don't hold. See also Security & Trust.
Certifications: ZeroDriveX does not currently hold SOC 2, ISO 27001 or similar certifications for this service. [Update this section if and when audits are completed]
Your documents
- Original files are not stored. Their text is read, used for the review, and then deleted when the review finishes.
- We keep the finished report, the key facts drawn from it and a fingerprint of each file, so you have a record of exactly what was reviewed.
- Report retention: [Define retention period and deletion-on-request process]
Your account
- Each customer's reviews are kept separate. One customer can never see another's reports.
- Access keys are shown once, protected and can be revoked instantly.
- ZeroDriveX staff use a separate, locked-down operator console with short sessions and sign-in lockout.
In transit and in logs
- All traffic to the hosted service is encrypted with HTTPS.
- System logs record that a request happened, never what your documents say.
Accuracy and oversight
- Your documents are processed only to produce your review, and are not used to train AI models.
- Reports are decision support. Automated analysis can make mistakes, which is why every finding cites its evidence, every report states its limitations and flagged results receive human review.
Security questions or vulnerability reports: support@support.zerodrivex.com. See also our privacy policy and cookie policy.