Legal & Trust Center

CxCheck is built as a sovereign service. Document analysis runs on hardware we own and control - your documents are never sent to third-party AI providers and are never used to train public models. This Sovereign Hosted mode is how every customer is served today. An On-Site Node, where dedicated hardware is supplied pre-configured and operated inside your own facility on a subscription licence, is in development and available for approved enterprise projects, agreed in writing before onboarding.

No AI model provider is a subprocessor, because no third-party model provider processes your documents. Document analysis runs on hardware CxCheck owns and controls. The subprocessors we do rely on are a managed cloud database, storage and authentication provider; an email delivery provider for invitations and notifications; and a payment processor for billing. None of these receive document contents for AI analysis. A current named list with processing locations is available on request. See the Architecture & Data Security page for the full current data path.

Every project record is scoped to a single organization and enforced by row-level security in the database, so users can only read rows belonging to organizations they are a member of. Access within an organization is further limited by role-based permissions, and material actions are recorded in an audit trail. Data is encrypted in transit using TLS and at rest by the storage layer.

Your documents and project data are never used to train any model - ours or anyone else’s - and are never pooled across customers or shared with third parties for any purpose.