Security & data
Where your data lives, who sees it and what you take with you if you leave.
Every answer says what the product does today and where it is written down, so your IT people and your lawyer can check it without calling us. Whatever you cannot check here, require it in the contract.
The data#
The first thing anyone asks, and the one most quickly answered badly.
Where does my company’s data live?
On Google Cloud Platform, with your organisation’s data separated by access rule and not merely by naming convention. The servers are in the United States: that is an international transfer, covered by contractual clauses with adequate safeguards, and from 1 December 2026 it is governed by articles 27 to 29 of Law 21.719. It is contracted infrastructure: Google is neither a customer nor a commercial partner of PAIR.
Who can see what?
You decide. Each organisation assigns its inspectors, supervisors and administrators the level of access it sees fit, and masking applies on export too: downloading the file is not a way around it.
Is my company’s data used to train models?
No. It is processed to deliver the service you contracted and nothing else. The content of a field marked as reserved does not leave your organisation. What does travel to the model provider is the photo and the audio you send to be analysed, because analysing them is what you are asking for: that is why reserved fields exist.
What about personal data appearing in a photograph?
It is redacted with the product’s own function: national ID numbers, faces and whatever you mark.
The evidence#
This is where a vendor overclaims and nobody checks until there is a lawsuit. These are the two times that get recorded, and which of them you show.
Which time is recorded, and which one counts?
Two, each under its own name. The fill time comes from the device clock and tells you when the work was done. The approval time comes from the server clock, never the phone, and that is the one you show.
Does that have legal validity?
It is not an accredited electronic timestamp under article 5 of Chile’s Law 19.799: that requires an accredited provider, and PAIR is not one. What you get is the server’s time on a record that cannot be edited without leaving a trace, with its approval chain: documentary evidence, carrying the weight whoever receives it gives it. If your contract or your regulation requires an accredited timestamp, that is contracted separately with an accredited provider.
Can a record be altered after approval?
Every change is logged with its user, its date and what changed. It is not that it cannot be edited: it is that it cannot be edited without that being written down, which is what an auditor needs. And an auditor’s observation is a new document, not an edit: it does not touch the record or the seal.
What happens with no signal?
The form gets filled in full: the text, the photos and the dictation. Whatever is left pending uploads itself when coverage returns, and nothing is deleted automatically, not to free space and not after N failures. The only thing that needs a connection is approving and signing, because the timestamp is the server’s.
Getting out#
The question that opens any serious purchase evaluation, and that almost nobody answers in writing.
What if we stop being customers?
Records export in their original format, with their attachments and their PDF documents. Getting out does not depend on continuing to pay, and we do not charge for exporting.
In what format does it come out?
Records as a spreadsheet, reports as the PDFs the product already generates, and attachments as the files they are. Nothing proprietary that needs our software to open.
How long do you keep our data after we leave?
Whatever the services agreement says, signed with each customer. It is your decision, not ours: some industries need ten years of retention and others want immediate deletion.
No software makes a regulation be complied with. What PAIR does is leave the record you use to prove what you did, and the one answering to the inspector is still you.
Demo
Bring us your legal team’s questions
If your legal team has a vendor questionnaire, send it before the call: it comes back answered in writing, with its sources, not improvised in the meeting.
- Would you rather look at the plans first? See pricing.
- Still have questions? Check the FAQ.