Your data is not
our product.

No. Documents you upload are used only to generate your compliance report — nothing else. We process your documents through Anthropic's Claude API under a zero data retention policy for API customers. Anthropic does not store or train on your inputs. Your documents are never used to improve any AI model, including ours.

No. Every compliance check is completely isolated. Your documents are processed independently and never stored in a shared context or used to inform another user's results. Each analysis starts fresh with zero connection to any other account. What you upload stays in your account only.

We require the AI to cite exact regulatory clause numbers for every finding — FAR 52.204-21, DFARS 252.204-7012, HIPAA 45 CFR 164.312, and so on. Every finding cites the exact regulatory clause it references — so verification takes seconds, not hours. We build citation requirements into every report precisely so you can trust and confirm each output. Think of GovCheck AI as your compliance expert doing the heavy lifting — you bring the professional judgment for the final sign-off.

GovCheck AI is a compliance screening tool — not a legal advice tool. Non-attorney staff can safely use it to:

• Run initial compliance scans on incoming contracts and SOWs
• Generate preliminary gap reports for attorney review
• Flag documents that need priority attention
• Track regulatory changes across 25 federal frameworks

What requires attorney sign-off: any finding that influences legal strategy, contract negotiation, or client advice. GovCheck AI surfaces the issues — your attorneys make the calls.

We'll be direct. GovCheck AI is founder-led. Documents you upload are transmitted securely via HTTPS to our encrypted cloud infrastructure, processed through our AI layer under a zero data retention policy, and the resulting compliance reports are stored in our secure database for 90 days so you can access, download, and share them from your dashboard. As founder, Mark Gipson has administrative access only. We do not review user documents and have no business reason to do so. We are working toward SOC 2 Type I certification in Q3 2026, which will formalize access controls, least-privilege policies, and audit logging across all systems.

Good distinction. Currently: aligned, not certified. Our infrastructure runs on enterprise-grade platforms that collectively maintain SOC 2 Type II certification, PCI DSS Level 1 compliance, and zero data retention policies across hosting, database, CDN, and payment processing layers. Our AI processing layer specifically operates under a zero data retention policy — your inputs are never stored or used for model training. GovCheck AI itself is actively pursuing SOC 2 Type I certification, targeted Q3 2026.

Every compliance check is logged with timestamp, user ID, document metadata, frameworks analyzed, and the full findings report generated. If a specific output is questioned we can retrieve the exact report. We do not store original documents after processing — only the report output. All reports are exportable as PDFs from your dashboard at any time. Enhanced audit logging is part of our SOC 2 preparation roadmap.

In the event GovCheck AI ceases operations we commit to:

• 90 days advance notice to all active subscribers
• Full export of all compliance reports in your account
• Secure deletion of all account data within 30 days of closure

Your original documents are not stored after processing — so there is no document data at risk. We recommend all firms maintain their own copies of generated reports as standard practice.