Legal & trust

Security

Last updated September 28, 2026

Report a security issue or suspected incident: security@projectonus-delivered.com. We reply within one business day. Please don’t access other people’s data or disrupt the service while testing, and give us reasonable time to fix an issue before disclosing it.

How we protect your data

Encryption in transit (HTTPS/TLS) and at rest.
Separation — every organization’s data is isolated; each request can only reach one organization.
Access — sign-in through Google or Microsoft (use their multi-factor authentication), invitation only, roles, confidential documents and guest limits.
Outside links — unguessable, expiring, optionally password-protected (locked after repeated wrong passwords), rate-limited; executables and web pages can’t be uploaded.
AI — Amazon Bedrock, which doesn’t keep or train on your content; admins can turn AI off.
Audit — every document keeps a full history: uploads, views, downloads, approvals, outside access.
Resilience — continuous backups with 35-day point-in-time recovery; production data protected from deletion.
Engineering — infrastructure as code, automated tests on every change, deployments without stored cloud keys.

If something goes wrong

We follow a written incident response plan. If a breach affects personal data, we notify affected customers without undue delay and within 72 hours, and keep them updated until it is resolved.

Security

How we protect your data

If something goes wrong

Documents