Security
Data Processing Overview
How TrustRFP AI processes customer content, workspace data, and operational records.
Processed data
TrustRFP AI processes account data, workspace membership, billing records, support messages, uploaded documents, extracted text, questions, answers, citations, review decisions, exports, and audit records.
- Customer content remains associated with the customer workspace.
- Document text may be parsed, chunked, searched, embedded, cited, and used to draft answers inside the workspace.
- Billing and marketplace data is used for entitlement activation, plan mapping, usage reporting, and support.
Processing purposes
Data is processed to provide the service, secure access, operate subscriptions, generate and review responses, preserve auditability, support customers, and meet legal or marketplace obligations.
Retention and deletion
Workspace owners can request deletion or export of customer content. Production deployments should align retention periods with the customer agreement, DPA, backup policy, and applicable law.