Security

Data Processing Overview

How TrustRFP AI processes customer content, workspace data, and operational records.

Processed data

TrustRFP AI processes account data, workspace membership, billing records, support messages, uploaded documents, extracted text, questions, answers, citations, review decisions, exports, and audit records.

  • Customer content remains associated with the customer workspace.
  • Document text may be parsed, chunked, searched, embedded, cited, and used to draft answers inside the workspace.
  • Billing and marketplace data is used for entitlement activation, plan mapping, usage reporting, and support.

Processing purposes

Data is processed to provide the service, secure access, operate subscriptions, generate and review responses, preserve auditability, support customers, and meet legal or marketplace obligations.

Retention and deletion

Workspace owners can request deletion or export of customer content. Production deployments should align retention periods with the customer agreement, DPA, backup policy, and applicable law.