Trust
Your documents are yours.
Using Portia means uploading documents about something that matters to you, often something stressful, often private. You should know exactly what happens to them. This page is the plain-language account: where your data is kept, who processes it, what it is never used for, and what you can do with it. The formal version is in our Privacy Policy. This is the version written to be read.
The commitments
Six commitments.
The commitments we make about your data.
Private, and never sold.
We do not sell your data, and we do not share it for anyone else's purposes. It is used to provide Portia to you, and for nothing else.
Encrypted.
Your documents are encrypted in transit and at rest, protected both while moving and while stored.
Never used to train AI.
Neither Portia nor the providers who process your documents use them to train any AI model. Your case is not training data.
Stored in the UK and EU.
Your documents and account data are stored in the UK and the EU (Ireland). Some processing happens elsewhere under strict terms, and the next section sets out exactly who does what.
Deleted after a year.
If a case goes quiet for a year, its documents are automatically deleted, so your data does not sit with us indefinitely. An active case stays where you need it.
Yours to remove.
You can delete your documents at any time, without waiting for the automatic period.
The providers
Who touches your data, and what they do.
To run Portia, your documents pass through a small number of outside providers. We think you should know who they are and what they do, so here they are. Every one is bound by contract to process your data only to deliver the service, and none of them use it to train their own systems.
Supabase stores your documents and case data, in the EU (Ireland).
Anthropic provides the AI model that reads your documents to help organise and draft. It does not train on your data, or keep it after processing.
Voyage turns your documents into the searchable form Portia works from. It does not train on your data.
Clerk manages sign-in and your account. It handles your account details, not your document content.
Railway runs the software that powers Portia.
Sentry receives technical error reports only, and these are deliberately scrubbed so that your document content and personal details are never included. Error data tells us that something broke, not what was in your case.
Your documents are stored in the UK and EU. Some processing, such as generating a draft, takes place through providers outside the UK and EU, protected by standard data-protection safeguards. None of it involves your data being sold, shared, or used to train anything. The full, formal list of providers and their locations is in our Privacy Policy.
Your control
What you control.
Your documents are yours, and you stay in control of them. You can see what you have uploaded, remove any of it whenever you choose, and delete your account. When you delete a document, it is removed from Portia's storage. You do not have to ask, and you do not have to explain.
Honesty
What we don't claim yet.
We would rather be straight about what we haven't done than dress it up. Portia is early, and we do not yet hold formal security certifications. We are building to meet recognised standards, including ISO 27001, SOC 2, and Cyber Essentials, and this is where we will show them, once they are independently verified and not before. A certification worth trusting is one that has been earned. We will treat ours the way we treat everything else on this site: claimed only when it is true.
What next
That is how your documents are handled.
How Portia handles your case, what it will and will not do with what you upload, is on the Safeguards page.
The full legal account of how we handle your data is in our Privacy Policy. If you need the detail, the sub-processor list, the legal bases, the retention specifics, it is there. This page is the human version of the same commitments.
Portia isn't open yet. Join the waitlist and we'll tell you when it is.