How we keep your data safe

• Your workspace data, and the files you upload, are stored in the UK (London), with Supabase, a specialist database provider.
• It is encrypted in transit (HTTPS, with browsers told never to fall back to an unencrypted connection) and encrypted at rest by the database provider.
• The database is backed up every day, and those backups are kept for seven days.

• Only the people you invite to your workspace. Every request is checked by the app, and the database itself refuses to hand one company's records to another. We tested that against a simulated outside account, and it saw nothing.
• A small number of named people at CleverFox hold administrator access, for support. Administrative actions and data exports in the app are written to an audit log that its own administrators cannot edit.
• Passwords are never stored by us in readable form. Sign-in is handled by an industry-standard provider, and sign-in, password reset and AI features are rate-limited.

• We don't train AI models on your data.
• Our main AI provider, Anthropic, does not use business API data to train its models under its commercial terms.
• Every AI provider we use is named in our privacy policy, along with what it receives.
• Every conversation with a fox goes through a governed door: approved models only, a safety floor on every call, outside content marked as evidence, not instructions, and a log of each call (who, which fox, which workspace, what happened) that never keeps what was said.
• In line with the EU AI Act's risk-based approach, every AI agent sits in a register with its risk tier and the controls it passes, and the AI in the product is always presented as AI.
• When an AI agent posts in your team chat on someone's behalf, the message says so beside their name. Only our servers can set that mark, never a browser, so nobody can fake it.

• If a breach ever affected your data, we would tell you without undue delay and report it to the Information Commissioner's Office within 72 hours where the law requires it.
• The audit log means we can establish what was accessed, and when.
• Every credential we hold has a written rotation procedure, and a suspected leak means rotating the same day.

• Your content stays yours.
• When someone leaves, deleting them removes their sign-in, their uploaded files and their identity from team content. Each deletion produces a report and is recorded in the audit log.
• You can ask for your data to be exported or deleted.
• If your company leaves, you have 30 days to export everything. Then we delete it from our live systems.

• We publish a 40-point security fact sheet at foxoffice.app/security. It marks every check as in place, in progress or not yet applicable, because honesty is part of the standard.
• Formal certification is on our roadmap: Cyber Essentials, the UK government-backed scheme, then ISO 27001.
• Also in progress: two-factor sign-in for administrators, a rehearsed restore from backup, and formal sign-off of every AI provider's data terms.

The detail behind every line is on our 40-point security fact sheet, and every provider we use is named in the Privacy Policy. Ask us to show you the evidence for anything here: hello@cleverfox-ai.com.