When you sign in
Your email address, and the six-digit code we sent to it.
Trust
Where your data goes, and how to check
Vaultin AI is built for firms with a duty of confidentiality. This page sets out what stays on your computer, what is sent and to whom, and what reaches us, on each plan.
Data flow
Client details stay on your computer, on both plans
Your own AI account
Requests go straight from your computer to your provider, under your firm’s agreement with them. They never pass through us.
Fully managed Coming soon
We provide the AI, so your firm needs no provider account. Only anonymised text passes through our EU service, and it is not stored. Covered by our DPA.
On your computer
An encrypted vault that locks itself
Opened only with your passphrase
We never see the passphrase or the key made from it, so we can’t open your vault. Choose one only your firm knows.
Encrypted at rest
Chats, the dictionary, the search index and any documents you copy in are kept in one encrypted database (SQLCipher). Its key comes from your passphrase through Argon2id.
Locks itself
After 15 idle minutes, or the time you choose, and whenever the Mac sleeps. The key is held only in memory and wiped when the vault locks.
Originals never changed
Leave files in their folders and Vaultin AI reads them where they are. It never edits, moves or deletes them.
Works offline
Your chats, documents and search are there without a connection. Only questions to the AI need one.
Each client kept apart
Every workspace has its own documents, chats and placeholders, so one client’s files never reach another’s answers.
Never held back
If a subscription ends, the vault opens read only. Every chat and document stays readable, offline too.
Audit log
A record of every request, without a single real name
Every request that leaves a computer is recorded exactly as it was sent, so a partner, a client or an auditor can review it.
Checked for tampering
Each entry carries a SHA-256 hash of the one before, and the app shows whether the chain is intact.
Rules for each workspace
Limit a workspace to EU providers, and a request to any other provider is blocked and logged.
Ready to export
Export the log as PDF or JSON to share with a partner, a client or an auditor.
What reaches us
A licence check, and nothing from your client work
About once a month
This computer’s sign-in token, an anonymous code for the computer (a SHA-256 of its hardware id, never the id itself), the platform and the app version.
When you subscribe
Paddle tells us your subscription’s status and end date, with your name and email. Card details go to Paddle only.
Nothing from the vault, ever: no documents, chats, names or placeholders. Full details are in our privacy notice.
Sub-processors
Who helps us run Vaultin AI
None of them receives your client work. Your AI provider, on your own account, works for your firm, not for us.
| Company | What for | What it handles |
|---|---|---|
| Cloudflare | Licence server and its database | Account emails, sign-in tokens (hashed), anonymous computer codes, subscription status |
| Resend | Sign-in emails | Your email address and the sign-in code |
| Paddle | Payments, as our reseller and merchant of record | Billing name, email, address, payment details and invoices |
| Netlify | This website, and its demo and waitlist forms | What you type into a form; visitors’ IP addresses in server logs |
| Managed plan AI host | The AI on the fully managed plan | Anonymised text, not stored. Named here before the plan launches |
Standards and documents
Facts, not badges
UK and EU GDPR
With your own AI account we never process your client data, so your firm stays in control of it. On the managed plan we act as your processor under our data processing agreement.
Certifications
We don’t hold ISO 27001 or SOC 2 certification yet, and we won’t show a badge until we do.
Your own review
Read our privacy notice and terms, or send your security questionnaire to support@vaultin.ai.
See the AI’s view for yourself
Switch any conversation to what the provider received. Free for 14 days.