Know where the data goes.
Then bring the work.

Can we evaluate Reqify without client data?

Yes. Start with fictional project notes and documents. Before uploading confidential information, confirm your client’s permission and your organisation’s requirements. Removing names alone may leave sensitive information in a document.

Which services process project information?

The application uses AWS S3 for files and Supabase for application records and text chunks. OpenAI processes text for search embeddings and supports extraction and audio transcription. Pinecone stores search vectors and associated text excerpts. Anthropic processes project context and instructions to generate drafts. The services involved depend on the feature you use. Hosting, identity, email, billing and diagnostics involve additional providers; contact us for a workflow-specific review. This is not a complete contractual subprocessor register.

Is our content used to train AI models?

Reqify’s privacy policy states that customer content is not used to train generalised AI models. Processing and retention are separate from training. For a confidential-data evaluation, ask us to confirm the applicable provider agreements, account settings and any data-sharing exceptions. We do not make a zero-retention promise.

Does choosing Canada keep all processing in Canada?

A document-storage region is not an end-to-end processing guarantee. Databases, search indexes, AI processing, diagnostics and backups may have different locations. Confirm the complete data path with us before using information subject to a residency requirement.

What access and encryption controls are available?

Reqify implements project and workspace access checks and encrypted file storage. Organisation policies and options such as SSO and customer-managed keys depend on plan and configuration. KMS is configuration-dependent; it is not guaranteed for every encrypted file. Confirm the controls needed for your workspace before relying on them.

What happens when data is deleted?

Reqify includes deletion and retry workflows for application records, stored files and search data. Backups, provider retention and records retained for legal purposes need separate consideration. Contact us to confirm the scope and timing for your use case; deletion is not a promise that every copy disappears immediately.

Can you provide certification or compliance assurance?

This page is not a certification or a guarantee of regulatory compliance. We have not supplied an independent certification report here. Tell us which report, agreement or control your organisation requires so we can confirm available evidence and any gaps. A provider’s certification does not certify Reqify.

Who is responsible for reviewing the output?

AI-generated work is a draft. Your reviewer should check source accuracy, unsupported assumptions, missing requirements and disclosure risks before sharing it. Source references help review; they do not guarantee correctness.

How do we request a DPA or security review?

Contact the Reqify team at /contact or support@custovia.io with your required controls and workflow. Do not send confidential project material, credentials or personal records in the initial enquiry. Contractual terms, processing locations and retention commitments require confirmation from the team.

Request a security review