Security

Isolation

Processing is designed to run in an isolated cloud account in the region agreed with you, with no route to the internet.

Every model, including OCR, runs on our own infrastructure. No original data is sent to a third-party AI or OCR provider.

Keys

Each batch is designed to have one mapping key: the link between real values and their stand-ins. It is kept in a separate store from the data, and by default it is destroyed when the batch is accepted.

By default, people are not linked across batches.

Logs and journal

Every decision is logged, so any output can be explained.

Logs carry IDs and counts, never extracted text or matched values.

What we never release

Files that cannot be processed — unreadable, unsupported or failed at any stage — are withheld with a reason, never passed through raw.

Quality evidence

We measure quality against answer keys: hand-marked lists of every identifier in a sample. Each answer key is fingerprinted before scoring, so it cannot be adjusted afterwards.

We report the outcome of every file in a processing report, and what we measure in a quality report, with sample sizes.

Responsible disclosure

Found a vulnerability in stagename.ai? Email security@stagename.ai. Please give us 90 days before public disclosure.