FIG. 8 — Security & Trust
Answers for your IT lead, in writing.
If you vet vendors for an owner, this page is for you. It says what we commit to, in plain language, so you don't have to call.
Our commitments
| Your data stays in your accounts | The work runs inside the systems you already own. We do not copy your records into a system of ours. |
| Access limited to the job | Each workflow gets only the access it needs, granted by you and revocable by you at any time. Our team members are named to you. |
| Never used to train AI | Your data is never used to train AI models, by us or by anyone we work with. |
| Nothing goes out without approval | A person checks every item and you approve it before it is sent, filed, posted or paid. |
| Everything on record | Every action is logged: who prepared it, who checked it, who approved it, and when. The log is yours and exportable. |
| Incident contact | One named person to call. We tell you of any incident affecting your data within 24 hours of finding it. |
| Exit terms | Cancel the monthly plan at any time. You keep everything deployed, the runbooks, and the full record. We remove our access the same day. |
Technical annex, under NDA
The providers and subprocessors we use, data flows, and access controls are listed in a technical annex. We share it with your IT team on request, under NDA.
Security questionnaires
Send us your vendor questionnaire. We answer the common items in advance so your team can review without a meeting.
We do not claim SOC 2 or HIPAA compliance, and we do not take on work that requires them. Questions: hello@checkwright.ai.
You already know which job eats your week. Start there.
A reply the same business day. A written scope and fixed price within 48 hours of the call.