Procurement data is commercially sensitive: prices, contracts, suppliers and budgets. This page explains how we protect it and how Intakt’s AI features use it.
Where your data lives
The application and database run in London. Uploaded documents are stored in encrypted object storage. The providers we use are listed on our sub-processors page.
Keeping accounts apart
Every record belongs to exactly one customer account, and the database itself enforces that separation with row-level security, so a mistake in application code cannot show one customer’s data to another.
Encryption and access
- All traffic is encrypted with TLS. Data is encrypted at rest by our hosting providers.
- Documents are downloaded through short-lived links, never public addresses.
- Inside an account, roles and permissions decide who can see and change what. People only see what their role allows, including through the assistant.
- Access to production systems by our staff is limited to what is needed to run and support the service.
- Sign-in is handled by a dedicated identity provider.
Resilience
- The database is backed up continuously with point-in-time recovery.
- Every change to the product is tested automatically before it is released.
- Requests are rate-limited to protect the service from abuse.
How the AI features use your data
- When you ask the assistant a question or Intakt reads a document, only the text needed for that task is sent to our AI provider, Anthropic.
- Your data is not used to train AI models, by us or by Anthropic.
- The assistant works under your permissions: it can only look up what you could look up yourself.
- It suggests and drafts; it never sends, approves or changes anything until a person presses a button.
Benchmarks
Prices and order values can be combined into anonymised benchmarks, with personal data and the names of customers and suppliers removed first. A benchmark is only shown when at least five customers contribute, and any customer can stop contributing. The details are in our terms.
Reporting a security issue
If you think you have found a vulnerability, please email hello@intakthq.com with the details. We will reply quickly and will not take action against good-faith research that respects our acceptable use policy.