Security

efilo cannot widen your access. Only mirror it.

Your documents carry permissions already. efilo reads them, enforces them on every query, and shows you where each answer came from.

You see what you already had access to

efilo inherits per-document access controls from the system the file lives in and applies them at query time. If your access can't be confirmed, the document doesn't appear: not in search, not in an answer, not as a citation.

Every answer traces back

Each response links the documents and messages it drew on, and every figure names the source and age behind it. Nothing arrives without its evidence.

Nothing irreversible happens on its own

efilo drafts notices, RFIs, pass-throughs and pay-app adjustments. It does not send them. Every outbound action waits for a person.

Your tenancy is your own

Each customer runs on a dedicated database, storage bucket and deployment. Isolation is the deployment itself, not a filter in a query. We never train on your data.

In place today, and what's next

If you're evaluating efilo for a regulated environment, this is the honest list. Talk to us and we'll go line by line.

Single sign-on

Microsoft Entra and WorkOS, with sessions revocable org-wide

In place

Dedicated deployment per customer

Own database, own storage bucket, own instance

In place

Encryption in transit and at rest

Including credentials for every connected system

In place

SOC 2 Type II

Planned as we move out of private preview

Planned

ISO 27001

Planned

Planned

GDPR alignment

Planned

Planned

Questions we get asked

Who can see what?

Exactly what your source systems already allow. efilo reads the access list on each document and enforces it on every query. It cannot widen your access, only mirror it.

Do you train on our data?

No. Your documents are used to answer your questions and nothing else. They never enter a training set.

Can efilo send something without us?

No. Drafting is automatic; sending is not. Notices, RFIs and anything else a third party would see stop at a person.

What happens if we disconnect a source?

Sync stops. What efilo already indexed stays, because it has become part of your own cited record. A notice-compliance history shouldn't vanish because you changed PM tools.

Where does our data live?

In a database and storage bucket dedicated to your organisation, in cloud infrastructure we run for you alone. Nothing is shared with another customer.

Send us your security questionnaire

We'd rather answer it now than after you've spent a month evaluating.