Security, retention and limits

Isolation and hosting

One tenant per workspace: separate storage prefixes, row-level isolation, separate encryption context. Google Cloud, asia-east1 by default (EU/US on request). TLS 1.2+ in transit; encryption at rest; Cloud SQL point-in-time recovery.

Retention

Default 180 days per workspace (dispute cycles are long), configurable 30–730. Deletion within 30 days; backups roll off within 35. Usage ledger and audit log 2 years; billing records 7 years.

Access

SSO (Google, Microsoft) on Network and Enterprise; magic-link email otherwise. Roles: clerk, analyst, approver; read-only roles for shippers on request. Our operational access is limited, short-lived and logged.

Model providers

Google Vertex AI by default via our channel, or your own key. Documents are sent for the request in hand under enterprise terms that exclude training.

Deliberate limits

• Never sends anything to a carrier, terminal or trucker.
• Never logs into portals or pulls data on its own schedule.
• Never picks between conflicting timestamps silently.
• States when a dispute's contractual basis is weak.
• Does not handle freight-rate, weight/dimension or fuel-surcharge disputes.

Vulnerability reports

[email protected]; acknowledged within two business days.

Policies

Privacy policy, terms, DPA and sub-processor list are published once at carnegieintel.com and apply to this product.