Enterprise-Grade Document Security

Your documents contain sensitive data. extriq treats security as a feature, not an afterthought. Here's how we protect your information.

Data Encryption

All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption. Your documents are secure at every stage of processing.

EU-Hosted Storage

Your documents, extracted results, project data, and account information are stored on Supabase (AWS EU, Ireland, eu-west-1) and stay there at all times. AI processing — the temporary act of sending content to a language model — happens at our sub-processors Google (Gemini) and OpenAI in their US data centres, under Standard Contractual Clauses (SCCs), with no retention at the vendor.

AI Providers

Data extraction is powered by Google Gemini (gemini-2.5-pro for paid plans, gemini-2.5-flash-lite for free). Translation, Q&A chat, document comparison, and embeddings use OpenAI (GPT-4.1, GPT-4o, text-embedding-3-small). Both vendors operate under paid API agreements that prohibit training on customer data.

No AI Training

Your files are never used to train AI models. Under both Google's and OpenAI's paid API terms, customer content is not retained at the vendor beyond the duration of each request — zero data retention by design.

GDPR Compliance

Full GDPR compliance with the right to access, rectify, and erase your data. Data processing agreements available for enterprise customers.

Access Control

Role-based access control, team permissions, and complete audit logging. You control who sees what.

Infrastructure Security

Built on Supabase (PostgreSQL) with row-level security, hosted on Vercel's edge network. Regular security audits and monitoring.

Corporate Networks & Firewalls

extriq needs only outbound HTTPS (port 443) — no installation, no inbound connections. If extriq doesn't load on your company network, your web filter may not have categorized extriq.com yet. Ask IT to allow these hostnames: extriq.com, tocundvyjaifnqpmvvvn.supabase.co (incl. WebSocket), js.stripe.com, api.stripe.com, checkout.stripe.com, billing.stripe.com, challenges.cloudflare.com, accounts.google.com, login.microsoftonline.com — and to categorize extriq.com as Information Technology / Business. Questions: info@extriq.com.

Start Free Trial | Schedule a Demo — No credit card required. 30-day free trial. GDPR compliant.