Privacy Policy

Last updated: June 1, 2026

Who we are

ForensAssess (referred to here as "we," "us," or "ForensAssess")

What we collect

Account information (name, email) provided via Clerk authentication. Files you upload to run jobs. Job metadata (service used, page counts, timestamps). Payment information processed by Stripe (we do not store card numbers). Server logs for security and debugging.

How we use it

To provide the service you requested, process billing, and maintain security. We do not sell your data. We do not use your uploads to train any AI model.

Data retention

Input files: 30 days, then automatically deleted from S3. Output files: 90 days, then automatically deleted. Account and job metadata: retained while your account is active.

Security

Encryption in transit (TLS 1.3) and at rest (AWS KMS-managed keys). Access to production systems is restricted. We maintain audit logs.

Subprocessors

We use the following subprocessors: Amazon Web Services (S3 storage, KMS encryption, CloudWatch logging, and Bedrock for Claude AI inference under AWS BAA - Anthropic does not see customer data); Neon (managed Postgres database, on Scale plan); Clerk (authentication, identity only - no PHI); Vercel (web hosting and request routing - PHI bypasses Vercel by uploading directly to S3 via presigned URLs); Stripe (payment processing - no PHI).

HIPAA / Business Associate Agreements

AWS BAA is signed and active as of May 29, 2026 (covers S3, KMS, CloudWatch, Bedrock). Neon, Vercel, and Clerk BAAs are in progress. Until the full BAA chain is complete, do not upload identified Protected Health Information. De-identified records, synthetic data, and documents already disclosed in litigation are acceptable.

Your rights

You may request deletion of your account and associated data at any time by emailing privacy@forensassess.com. We will respond within 30 days.

Cookies

We use only essential cookies required for authentication (set by Clerk) and Stripe checkout. We do not use advertising or tracking cookies.

Contact

privacy@forensassess.com