Security
We recognize that using any third-party system for document redaction can present concerns and it should. Security is without a doubt our top priority. On this page we detail the precautions we have taken to keep your data safe. If you would like more information or have questions, please do not hesitate to contact us. We appreciate your concerns around security and would be happy to discuss at length how our system is designed to keep your data safe.
Encryption
We use encryption to keep your data safe both while in-transit and at rest. All operations performed on the Philterd Data Services website are handled over an encrypted connection (https). This means all information transmitted between your web browser and the Philterd Data Services servers is encrypted. This includes your login, redaction policies, documents, and all other transmitted information.
We also encrypt all documents that you upload for redaction. Each user account on Philterd Data Services is assigned a unique encryption key, and this encryption key is used to encrypt and decrypt your documents. Without this encryption key, your documents cannot be read. Specifically, we use envelope encryption where your unique encryption key is used to decrypt a master encryption key used to encrypt your documents. Envelope encryption provides a second layer of protection, and the encryption operations are performed in a manner which does not require any transmission of the master encryption key.
Redaction ledgers are encrypted in the same manner. Your account's unique encryption key is used to decrypt a master encryption key which is used to encrypt redaction ledgers.
For additional security, all encryption keys are automatically rotated on a scheduled periodic basis. The encryption method used is AES-256 GCM.
Third-Party Services
We do not send your data to any third-party for processing. All redaction, risk assessments, and any other required processing is performed on the Philterd Data Services servers.
- Philterd Data Services does not use OpenAI/ChatGPT or any other external third-party service for document processing.
By not relying on any external third-party services for document processing, we can offer lower prices, more features, and increased security. We believe this is a strong differentiator between Philterd Data Services and similar services.