Skip to main content
Book a demo
Product
Solutions
Resources
EnterprisePricing
Sign in
Trust Center

Security you can check, like everything else we make.

What we hold today, what is still in progress, and every company that processes your data. Partner certifications are listed with each subprocessor, never as our own.

Compliance

SOC 2 Type IIn progress
Data processing addendumAvailable to business customers on request

Our hosting, database, identity and AI providers hold their own certifications. Those are theirs, not ours; each vendor's security page is linked from the full subprocessor list.

There is no SOC 2 report yet. Leave your email and we will send it when it exists.

Data handling

Encryption
TLS 1.3 in transit. AES-256 at rest.
Hosting region
United States.
Access to your documents
Row-level access controls in the database: your documents are reachable only through your signed-in account.
Account deletion
Account data is deleted within 30 days of a valid deletion request.
Uploaded files
Deleted automatically after 30 days.
Billing records
Kept for up to 7 years for tax and legal compliance.
Breach notification
If a breach affects your personal information, we notify you and the relevant authorities within 72 hours of becoming aware of it.

Full detail is in the privacy policy.

AI and your content

  • We do not sell your data or use it for advertising.
  • Improving our own models from your writing is off unless you turn it on in account settings. When it is on, we may store the text you submit to humanize and the rewritten text, with detector scores. Turning it off deletes those stored pairs.
  • Our AI providers’ API terms say they do not use API inputs and outputs to train their models. Each provider is listed under Subprocessors with what it does.

Subprocessors

27 companies, last updated July 8, 2026. Details and each vendor's security page are on the full subprocessor list.

VendorPurposeLocation
Anthropic PBCAI & language modelsUnited States
Atlassian Pty LtdConnectors & communicationsWorldwide
Clerk, Inc.Identity & accessUnited States
Cloudflare, Inc.Infrastructure & hostingWorldwide
Datadog, Inc.Observability & product analyticsUnited States / EU
Daytona Platforms Inc.Infrastructure & hostingWorldwide
DeepSeekAI & language modelsVarious
Fly.ioInfrastructure & hostingUnited States
Functional Software, Inc. (Sentry)Observability & product analyticsUnited States / EU
Google LLCConnectors & communicationsWorldwide
Groq, Inc.AI & language modelsUnited States
Loops (loops.so)Email deliveryUnited States
Microsoft CorporationIn-browser document previewWorldwide
Modal Labs, Inc.Infrastructure & hostingUnited States
Neon, Inc.Data platformUnited States
OpenAI, OpCo LLCAI & language modelsUnited States
Perplexity AI, Inc.Web researchUnited States
PostHog, Inc.Observability & product analyticsUnited States / EU
Resend, Inc.Email deliveryUnited States
Sapling Intelligence Inc.Quality scoring & humanizationUnited States
Slack Technologies, LLC (Salesforce)Connectors & communicationsWorldwide
StealthGPT / LXRM LLCQuality scoring & humanizationUnited States
Stripe, Inc.PaymentsWorldwide
Tavily AI, Inc.Web researchUnited States
Together AI, Inc.AI & language modelsUnited States
Vercel Inc.Infrastructure & hostingWorldwide
Winston AI Inc.Quality scoring & humanizationCanada / United States

Get an email when we add or replace a subprocessor.

Policies

Report a security issue

  1. Email security@neurawrite.ai with what you found and how to reproduce it, and keep the report private while we fix it.
  2. Give us a reasonable window to fix the issue, about 90 days, before you disclose it publicly, unless we agree otherwise.
  3. Out of scope: social engineering, physical access, denial of service against production without our agreement, and issues in third-party services, which go to that vendor.
  4. We do not run a paid bug bounty.

Machine-readable contact: security.txt