How TareX handles your data

Last updated November 11, 2026. Questions: security@tarexintel.com

The short version

Your case data is never sent to an outside AI company and is never used to train AI models.
AI drafts run on servers TareX operates, in the United States. The app refuses to send case data to any AI server that isn't on its approved list.
The app and its database are stored with our hosting provider in the United States, under contract.
Every draft records which AI server, model and prompt version produced it, and a human signs every final assessment.
Email and text alerts never contain names or case details, only a prompt to sign in.

Subprocessors

These companies help us run the service. Each is bound by written data-protection terms. We give clients at least 30 days' notice before adding a new one.

Company	What they do	Data they hold	Location
Render	Hosts the app and database	All client data, encrypted in transit	United States (Virginia)
TareX-operated AI servers	Draft assessments	Case data while a draft is generated; not stored after	United States
[Email provider]	Sends email alerts and invitations	Recipient name and email; no case details	United States
Twilio	Sends text alerts	Recipient phone number; no case details	United States

Separation, security and retention

Each client's records are kept separate in the app. Client users only ever see their own organization.
TareX analysts who review assessments can see the clients they serve. Sign-offs, changes and exports are recorded in the audit log.
Connections are encrypted with HTTPS, including the link between the app and our AI servers.
After a contract ends, clients have 30 days to export their data. We then delete it within 60 days, except where law requires us to keep it.
If we confirm a breach affecting client data, we notify the client within 72 hours.

TareX is decision-support software. It is not an emergency service. If anyone faces an immediate threat, call 911.