Privacy

TraceProof stores case files, redacted evidence, and findings for the signed-in account only. Tenant isolation is enforced on every query.

Raw evidence is encrypted at rest and deleted after seven days by default, or sooner if you delete it. Analysis uses the xAI Responses API with store=false. AIRLOCK lists what would be sent before you approve.

We do not sell data, do not scan devices remotely, and do not log uploaded evidence, prompts, or secrets. See PRIVACY.md in the repository for the full policy draft.