Your documents stay yours.
Construction contracts and dispute documents are commercially sensitive. AIgile is built on established cloud providers, and we've tried to describe our data practices — and their limits — plainly.
Amazon Web Services
Accounts, projects, documents
Application hosting
Authentication
Subscriptions & purchases
Account & notice emails
Security built in, not bolted on.
Encrypted connections
Traffic between your browser and AIgile is sent over HTTPS. Our providers describe how they protect stored data in their own security documentation.
Third-party AI processing
To generate your analysis, your documents are sent to an AI model provider (AWS Bedrock). AWS publishes how Bedrock handles customer prompts and outputs in its documentation and service terms. We rely on those terms and can't change them.
Established cloud providers
AIgile runs on established third-party providers rather than our own servers or data centres. Each publishes its own security and compliance information, and we suggest reviewing it if you have specific requirements.
Sign-in and access
Sign-in is handled by a dedicated identity provider (Clerk). Within AIgile, your projects and contracts are scoped to your account or organisation and the people you invite. Access to our systems is restricted to those who need it to run and support the service.
Provider logs
Our infrastructure providers keep operational logs for monitoring and debugging under their own policies. We don't control how long they keep them.
We don't sell your data
We don't sell your documents, case submissions or analysis results, and we don't use them for advertising. We share data only with the service providers needed to run AIgile, as listed in our Privacy Policy.
What we do — and don't do — with your data.
We do not sell your data.
We don't sell your documents, case submissions or analysis results, and we don't use them for advertising.
Your documents are processed by third-party providers.
To generate your analysis, your content is sent to AWS Bedrock, and it is stored with the other providers listed above. Each handles data under its own terms, which we don't control. We can't give assurances about how they retain, use or secure data, so please review their published terms if that matters for your content.
Your data is scoped to your account.
Your projects, contracts and cases are scoped to your account or organisation within AIgile, and shared only with the people you invite.
We do not claim Australian data residency.
Our providers operate globally, and AI processing may occur in Australia or in other countries depending on availability. If Australian data residency is a hard requirement for your organisation, please contact us before signing up.
What we control, and what we don't.
Our security depends partly on the providers we rely on. We'd rather tell you plainly what that means than overstate our protections.
What we control
- Connections to AIgile use HTTPS
- Sign-in is required, and your data is scoped to your account or organisation
- We don't sell your data
- You can ask us to delete your account and data
- Free, unpaid scans are scheduled for deletion 30 days after upload
What we don't control or offer
- How our providers retain, log, use or locate data, including how AI model providers handle prompts and outputs
- Australian data residency is not offered
- AIgile itself is not independently certified (for example SOC 2 or ISO 27001)
- Customer-managed encryption keys are not yet available
- No system is completely secure, and we can't guarantee against unauthorised access or data loss
Security FAQs
How do AI providers handle my data?
Your documents are processed by AWS Bedrock to generate your analysis. How AWS handles customer prompts and outputs is set out in its own documentation and service terms, which we rely on and can't change. We can't make promises on AWS's behalf, so if this matters for your content, please read those terms before uploading.
Where is my data stored?
Your account, project and file data is stored with our database provider (Supabase), and AI processing runs on AWS Bedrock. Our providers operate globally, so data may be processed or stored outside Australia. We don't offer Australian data residency — if it's a requirement for your organisation, please contact us before signing up.
Who can see my documents?
Within AIgile, your documents are available to your account and to the people you invite to your organisation or job. Our service providers, and the limited number of AIgile personnel who operate and support the service, may technically be able to access systems that hold data.
Are logs retained?
Our infrastructure providers, including AWS, may keep operational logs for monitoring and debugging under their own policies. We don't control how long they keep them.
What certifications do you and your providers hold?
Our providers publish their own compliance reports and certifications, and we suggest reviewing them directly. AIgile itself isn't currently independently certified (for example, SOC 2 or ISO 27001). For Enterprise procurement, contact us and we'll go through what we can.
What happens to my data if I close my account?
You can ask us to delete your account and data at any time and we'll act on your request. Copies held by our providers, such as backups or logs, are governed by their own policies. Our Privacy Policy has the details. You're also responsible for keeping your own copies of anything you need, such as contracts and notices.
Do you offer a Data Processing Agreement?
Enterprise customers can contact us to discuss data processing terms.
This page describes AIgile's current data handling in plain English. It is general information, not a warranty or guarantee. Our Privacy Policy and Terms of Service contain the legally binding terms, and our providers' practices are governed by their own terms. This page will be updated as our infrastructure evolves. For Enterprise data processing enquiries, please contact us.
Questions about how we handle your data?
We're happy to walk you through our infrastructure and data practices in detail — especially for Enterprise procurement or organisations with specific data handling requirements.