Security

Our approach

Claims reports contain sensitive information, so we build echodraft to keep your data private and under your control.

Your data stays yours

Each user’s documents and claim data are stored in their own protected space. Our database rules only allow you, and the teammates you invite, to read your data. We do not sell your data and we do not use your reports or dictated audio to train AI models.

Protection in transit and at rest

All traffic to echodraft is sent over HTTPS. Data is stored on Google Cloud infrastructure, which encrypts data at rest and in transit.

Sign-in and access

You sign in with a password or your Google account. Team access is by invitation only, and plan limits are enforced on the server, not just in your browser.

Safe by design

We apply strict browser security headers, host our own copies of the libraries the app depends on, restrict uploads to safe file types and rate-limit sensitive actions to reduce abuse.

Reporting a security concern

If you believe you have found a vulnerability, please tell us through our contact page so we can look into it quickly.