Security

Your Documents Are Yours

RequirementsHub is built for professionals handling confidential client material. Your documents are never used to train AI models, never shared with other users, and never sold or shared with third parties for marketing or analytics.

Processing Lifecycle

  1. 01

    Upload

    TLS 1.3 in transit. Documents uploaded directly to encrypted object storage.

  2. 02

    Processing

    AI extraction parses your document into structured chunks. Processing is ephemeral — model providers do not retain content.

  3. 03

    Knowledge Model

    Stakeholders, objectives, systems, constraints, and requirements are stored as entities scoped to your project.

  4. 04

    Analysis

    Gap detection, traceability, and maturity scoring run against your Knowledge Model — no cross-customer data is used.

  5. 05

    Storage

    All project data encrypted at rest with AES-256. Isolated per account.

  6. 06

    Deletion

    You can delete any project or your entire account at any time. Deletion is propagated to storage and database within 24 hours.

AI Processing

RequirementsHub uses two AI providers to extract entities and generate analysis: Anthropic (Claude) and OpenAI (GPT). Both are accessed under enterprise API terms that prohibit using customer data for model training.

No other AI providers are used. Document text is sent to these providers only to fulfill your analysis request, and is not retained by them beyond the inference window.

Access Controls

Customer documents and project data are isolated by account. RequirementsHub staff do not access customer data except to resolve a support request at your explicit written consent.

Production access is restricted to a small engineering team, scoped via least-privilege roles, and audited.

Your Rights

  • Export all your data at any time (JSON + original documents).
  • Delete individual projects from your account dashboard.
  • Delete your entire account — including all documents, entities, and generated outputs — on request. GDPR-equivalent erasure.

Questions: security@requirementshub.ai

Last updated: June 2026