Trust · Updated November 2026

Security & data handling

Submission packets contain your clients' business data. This page states plainly where that data goes, who processes it, and how long it stays — no badge theater.

Your documents go directly to Google Gemini

When you run an analysis, the PDF is sent from our server straight to the Google Gemini API using our own Google API key. There is no reseller, no intermediary AI gateway, and no third party in between. The document is processed to produce your extraction, findings and Q&A answers — and nothing else.

Uploaded documents are not used to train AI models. Processing happens only to deliver results back to your agency.

Subprocessors

The complete list of services that touch your data:

ServicePurposeLocation
Google Gemini APIDocument analysis (extraction, reconciliation, Q&A)United States
Lovable Cloud (database, file storage, authentication)Application data and uploaded filesUnited States
ResendTransactional email (follow-up drafts you choose to send)United States

Access and isolation

Every account belongs to an organization. Documents, extracted fields, findings and audit history are isolated per organization at the database level — one agency can never read another agency's data.

Access requires an authenticated session. There are no public links to uploaded files; document downloads use short-lived signed URLs.

Retention and deletion

You control retention. Archiving a submission hides it from your active list; deleting a submission removes its documents, extracted data and history from storage.

If you close your account, contact us and we will delete the organization's remaining data within 30 days.

Pilot with synthetic or redacted files

Not ready to upload real insured data? We encourage starting with synthetic or redacted packets. The analysis engine works identically, and your team can evaluate the full workflow — extraction, findings, checklists, Q&A — without any client data leaving your office.

Report a security issue

Found a vulnerability or have a security question? Email info@packetslip.com. We also publish a security.txt file for security researchers.

Questions from your IT or compliance team?

Bring your security questionnaire to a demo call and we will walk through it together.

Book a demo