SECURITY · EIGENTIX LAST REVIEWED OCT 2026
Security, stated plainly.
What is built today, what we agree with each client in writing, and what is still on the roadmap. Ask for the security pack and we will send the details.
Request the security pack § 1 · BUILT
Built today
- Append-only audit log of uploads, runs, review decisions, consolidation and exports.
- Role-based access at two levels: workspace roles and per-project roles.
- Google sign-in, with signed tokens (RS256) that the API verifies independently.
- A dedicated instance for each client.
- Retention and deletion controls.
- Logging designed to keep personal data out of logs.
- TLS on every connection to the site and the app.
§ 2 · AGREED
Agreed with each client, in writing
- A data processing agreement, signed before we receive any file.
- Our sub-processor list, including the AI model provider (Google Gemini).
- Breach notification terms.
- Where review happens: our reviewers are based in India. We confirm this before a pilot and respect carrier limits on offshore access.
- Answers to your vendor questionnaire. State insurance data security laws, including Virginia’s and New York’s, require licensees to vet vendors like us.
§ 3 · ROADMAP
On the roadmap, not built yet
- Encryption at rest for stored documents, data and backups.
- Masking of personal data the pipeline does not need.
- Hosting pinned to a US region, including the model endpoint.
- SOC 2 readiness.
Questions from your security or compliance team? We answer them on a call or in writing.