Can I send Underwrite a confidential OM?

The short version

• Your deals are never used to train AI. Underwrite trains no models, and the AI provider it calls does not train on the input under its commercial API terms.
• Encrypted in transit and at rest. The site is served only over HTTPS. Saved deals sit in the hosting platform’s private storage, which the platform encrypts at rest. Underwrite adds no encryption layer of its own on top.
• Private by default. Each account’s deals live in a folder with a random name that contains no email address, and every request opens only the signed-in person’s own folder.
• No passwords to leak. Sign-in is an emailed link that works once and expires in 15 minutes. Sessions sit in a cookie page scripts cannot read and end when you sign out.
• Confidential Mode. One switch on the desk stops the desk and the memo sending anything about the deal: no parsing, no AI calls, no lookups, no share or memo links, no saving to the server and no usage events.

What is kept, and for how long

A deal on the desk without sign-in

In your browser only. Underwrite's server keeps no copy.

A deal you save with Underwrite Core

Until you delete it. After Core ends it stays downloadable for at least 90 days.

A PDF you upload to the desk

Staged in private storage and deleted the moment the parse finishes, on success or failure.

A deal you forward by email

Attachments are read in memory and not stored. The extracted deal is saved to your account, and the last 30 replies (subject and reply text) are kept with your address so a retried message is not read twice.

Usage events

No document text, figures, names or addresses, by design. A deletion pass removes events older than 90 days when it is run.

Subscription records

Kept as long as the business needs them. They hold no deal data.

Deleting your data

• Delete any saved deal yourself from your account, at any time.
• Download every deal saved to your account before you leave.
• Change your private forwarding address from your account. The old address stops working at once.
• Clear this site’s browser data to remove every deal kept in your browser.
• For anything else, such as an account record, a saved email request or a subscription record, write to ali@getunderwrite.com and it is removed by hand.

A share link you sent and a file you exported are copies outside Underwrite, and deleting a deal does not reach them. The hosting platform’s request logs are kept under its own policy.

Who processes your data

Underwrite uses a small number of outside providers, each for one job. The privacy page describes the same paths at length.

Hosting platform

Serves the site over HTTPS, runs the server code, and holds the private storage for saved deals, account records and usage events. It also keeps its own request logs.

AI model provider

Reads a document when you parse one, forward one, or ask for an AI review or summary. Its commercial API terms do not use the input to train models. Returns, coverage, stresses and the verdict are computed by Underwrite's own code, never by the model.

Inbound email service

Receives mail sent to your private forwarding address and passes it to Underwrite, which checks the service's signature before reading it.

Email delivery provider

Sends sign-in links, replies to forwarded deals, reminders and emails you ask for.

Payment processor

Takes the subscription on its own hosted checkout page. Underwrite never sees a card number.

Form service

Delivers the two contact forms on the marketing pages to the founder's inbox.

Public data sources

Only when you press a lookup: a government geocoder and census data, a rental listings service for local comps, and map tiles. Confidential Mode turns all of them off.

What we do not have yet

• No third-party security audit, certification or penetration test report yet.
• No signed data processing agreements with the providers above.
• No single sign-on, team permissions or field-level audit log. Underwrite Core is one person's account.

If your firm needs a data processing agreement before sending a deal, use Confidential Mode, or work the deal by hand until that paperwork exists. The full account of each data path is on the trust page.