Data Handling & Security

What we store and what we never want

We store your program data (answers, statuses, tasks and plans), the documents you choose to upload, and evidence details such as titles, IDs, dates and control links.

We never want CUI, classified information, or export-controlled technical data (ITAR/EAR) in CUiGuide. Do not upload it.

Reference-only mode

You can use CUiGuide without uploading internal documents. Add each policy or procedure as a reference — title, your document number, version and where it lives — and answer the guided questions. Your files stay in your systems.

Where data is hosted and encryption

[Admin: confirm hosting provider and region.]

Data is encrypted in transit (TLS) and at rest.

AI processing

Drafting uses Anthropic. We send only the text needed for the draft, and never anything marked or attested as CUI unless your site turns that on.

[Admin: add the provider's data-use terms after confirming them.]

Subprocessors

Who at CUiGuide can see your data

[Admin: describe who can see customer data and when — for example, only when you ask for support, and every access is logged.]

Retention and deletion

[Admin: state how long data is kept.]

To request an export or deletion of your data, contact us below.

Security questionnaires, NDA and DPA

[Admin: add the contact email for security questionnaires, NDA and DPA requests.]