Your evidence never trains a model
Not ours, not any provider's. This is not a setting you have to find and switch off. It is written into your contract.
Security
Evidence is the most sensitive material you handle
Investigation records hold allegations, witness accounts, and identities that must not leak. Here is exactly how yours are protected.
Visit our Trust Center- 2 consecutive SOC 2 Type II audits
- Zero data retention
- 4 data regions
- Annual penetration testing
Why TensorCase
Built for the record you cannot afford to lose
Hosted on AWS, with 4 data regions available
Choose where your data is stored: the United States, Canada, the United Kingdom, or Australia.
Your data sits on infrastructure certified to ISO 27001, SOC 1/2/3, PCI DSS Level 1, and more.
Audited, twice over
Consecutive SOC 2 Type II audits, both with a clean opinion and no exceptions, plus annual penetration testing. Reports are available through our Trust Center.
Certifications
Compliance you can hand to your security team
- SOC 2Type II Certified
- GDPRCompliant
Security and privacy
What your reviewer will ask
Is my evidence used to train AI models?
We don't train on your data. Period.
We have a contractual, zero-data-retention commitment with our AI providers. Your data is never used to train their models, or ours.
Where is my data stored?
In the region you choose at the start: the United States, Canada, the United Kingdom, or Australia.
How is my data encrypted?
Your data is encrypted in transit and at rest.
Is my data separated from other customers' data?
Yes. Each customer's matters are isolated. No other customer can reach your record.
What about privilege and confidentiality?
Investigations are frequently conducted under privilege, and TensorCase is built to be used at the direction of counsel with contractual confidentiality protections in place. Treat it the way you treat any trusted, contracted vendor holding privileged material. Bar guidance in this area is developing, and we encourage you to review it alongside your own counsel.
Who can see my matters?
Only the people you grant access to. Administrators control access for the whole team.
Can I delete my data?
Yes, at any time. When you leave, you export what you need and we delete the rest. Nothing is retained, and nothing was ever used to train a model.
Which AI providers do you use?
You can view our current list of subprocessors.
Do you have a DPA?
Yes. Our Data Processing Addendum (DPA) is available online.
How do you handle cross-border transfers?
Your matters stay in the region you choose. Where a transfer is required, it is handled under Standard Contractual Clauses.
Has TensorCase been penetration tested?
Yes. TensorCase is penetration tested annually by an independent third party. You may request the results through the Trust Center.
Can I see your SOC 2 report?
Yes. You may request it through the Trust Center.
Send us your questionnaire
We are used to security reviews. Let's connect over a demo call.
See how it works