You see what you already had access to
efilo inherits per-document access controls from the system the file lives in and applies them at query time. If your access can't be confirmed, the document doesn't appear: not in search, not in an answer, not as a citation.
Every answer traces back
Each response links the documents and messages it drew on, and every figure names the source and age behind it. Nothing arrives without its evidence.
Nothing irreversible happens on its own
efilo drafts notices, RFIs, pass-throughs and pay-app adjustments. It does not send them. Every outbound action waits for a person.
Your tenancy is your own
Each customer runs on a dedicated database, storage bucket and deployment. Isolation is the deployment itself, not a filter in a query. We never train on your data.
In place today, and what's next
If you're evaluating efilo for a regulated environment, this is the honest list. Talk to us and we'll go line by line.
Single sign-on
Microsoft Entra and WorkOS, with sessions revocable org-wide
Dedicated deployment per customer
Own database, own storage bucket, own instance
Encryption in transit and at rest
Including credentials for every connected system
SOC 2 Type II
Planned as we move out of private preview
ISO 27001
Planned
GDPR alignment
Planned
Questions we get asked
Who can see what?
Exactly what your source systems already allow. efilo reads the access list on each document and enforces it on every query. It cannot widen your access, only mirror it.
Do you train on our data?
No. Your documents are used to answer your questions and nothing else. They never enter a training set.
Can efilo send something without us?
No. Drafting is automatic; sending is not. Notices, RFIs and anything else a third party would see stop at a person.
What happens if we disconnect a source?
Sync stops. What efilo already indexed stays, because it has become part of your own cited record. A notice-compliance history shouldn't vanish because you changed PM tools.
Where does our data live?
In a database and storage bucket dedicated to your organisation, in cloud infrastructure we run for you alone. Nothing is shared with another customer.