Security and your data
What happens to the bills of materials, costs and supplier documents you upload.
Where your data is stored
In the United States. This site runs on Vercel in its US East region. Your files are kept in private storage in the same region: they are never at a public link, and every download is checked against your private order link or a staff sign-in.
Your order details (company, contact, products, payment status) are kept in a Postgres database hosted by Neon in the US East region.
Encryption
In transit: every connection uses HTTPS, including this site's connection to its database.
At rest: files and the database are encrypted with AES-256 by our storage providers.
Who can see it
Only Certivo staff can open the staff side of this site. They sign in with their Certivo Google account, and sessions end after 12 hours.
You see only your own order, through your private order link. Payments are handled by Stripe; we never see your card or bank details.
How we use it
Only to prepare your report and to talk with you about your order. We never share your data outside Certivo, and we never use it to train AI models.
The analysis happens in the Certivo platform. For how the platform keeps data secure, see Certivo's Trust Center (opens in a new tab).
How long we keep it
We move your files into the Certivo platform for analysis, then delete them from this site.
Anything still here is deleted automatically 90 days after your reports are delivered. If you start an order and never pay, its files are deleted after 30 days with no activity.
We keep a record of each file's name, size and when it was deleted, and your order details, so we can support your order.
Deletion on request
Email sales@certivo.com with your order number and we'll delete your files from this site.
ITAR and CUI
Don't upload ITAR-controlled technical data or Controlled Unclassified Information (CUI). We ask you to confirm this before your first upload. If your files might contain either, talk to our team first.