Security and privacy
Personal details removed before anything is stored.
Provance is built for teams who handle sensitive conversations. Privacy and safety are enforced by the system at every step, and every decision about your data is recorded.
Privacy
Privacy by default.
Removed before anything else happens
Personal details are found and replaced with reserved fictional values and placeholders before data is stored or sent to any model, at every point where data comes in or goes out.
Your organisation decides
Choose to de-identify personal details, refuse data that contains them, or take responsibility for them yourself. The choice is recorded, and Engine documents follow it too.
Nothing leaks out at the end
One export rule applies on every route: nothing rejected, held for review or carrying personal details can be exported, downloaded or sent to a destination.
Safety
Safety review, with a person in the loop.
Safety review on every reply
A model reviews every assistant reply against a versioned safety policy. If the reviewer is unavailable, the item is held, not passed.
A person decides what is uncertain
Clear violations are rejected. Anything uncertain waits for an owner or admin to approve or reject it, and that decision is final and recorded.
Fails closed
If the systems that meter and limit AI use are unavailable, AI calls are refused rather than run unchecked.
Platform
How access and data are controlled.
Your organisation from your session
Every request is scoped to the organisation in your signed-in session or API key, never to a value supplied in the request.
Roles
Plan changes, billing, API keys and safety decisions are for owners and admins only. Viewers don't use a seat.
API keys act as a person
An API key acts on behalf of the member who created it, with that member's role.
Versions are never overwritten
A change makes a new version. Earlier versions, and the evidence about them, stay as they were.
Models chosen per role
Each model is chosen and evaluated for its role. For health and government organisations, some hosted providers are not used.
No trackers on this site
This website loads no advertising or third-party tracking scripts.
What we don't claim
No badges we haven't earned.
We would rather tell you where we are than put a logo on the page.
- Provance does not certify that your data or AI system complies with any law or standard. It gives your assessors evidence of what was done.
- We make no data-residency promises here. An Australian-processing option is planned for Enterprise customers first and is not available yet.
- Our privacy policy and terms are being finalised with counsel. Until they are published, email contact@provancelabs.org and we will send the current terms.
- Found a security issue? Email contact@provancelabs.org with “Security report” in the subject.
FAQ
Privacy questions.
How are personal details handled?
Personal details are removed before anything is stored or sent to any model, and replaced with reserved fictional values and placeholders. Your organisation chooses how personal details are handled, and that choice is recorded. Nothing that carries personal details can be exported.
Where is my data processed?
We do not make data-residency promises on this site. An Australian-processing option is planned for Enterprise customers first and is not available yet. If you have specific requirements, talk to us before you upload data.
Where are your privacy policy and terms?
They are being finalised with counsel. Until they are published, email contact@provancelabs.org and we will send you the current terms and answer any privacy question.
Verification details are on How the evidence works.
Bring sensitive data with confidence.
Start free: Engine for 90 days with your own model key, a Synthetic preview with three gold standards, and 100,000 words a month of Compliance Pack checks. No card needed to look around.