Privacy
What we will collect, and what is not built yet.
This draft describes intent and current state. It deliberately avoids security assurances we cannot yet support with implemented controls.
Draft of the current pilot preview
Current state of this preview
Free pilot — 5 slots. Mechanical subs get a complimentary closeout review. $395 per project after the pilot.
Eligibility answers are not submitted, and sample workspaces contain fictional specimen data only.
Free specification checklist
This optional flow saves your name, email, selected scope, specification PDF and extracted checklist. The PDF is sent to OpenAI for scoped requirement extraction; pages requiring scanned-text reading may be sent to Microsoft Azure Document Intelligence. Upload only documents you are authorized to share with those services.
Checklist access uses a private link token saved in your browser and expires after 30 days. Access expiry is not a promise of deletion: automatic deletion is not yet configured. Authorized reviewers can see saved checklist leads. Linking a checklist to your signed-in project copies its specification and verified requirements into that project; project retention is separate. Checklist email delivery is not currently available.
This checklist extracts stated requirements; it does not certify compliance or establish that your closeout package satisfies them.
What we intend to collect at launch
To operate the service we expect to process: your work email address for sign-in and notifications; your organization and project identifiers; the requirement documents and closeout documents you upload; and the findings and review records generated from them.
We also expect to hold payment records from our payment processor. We do not intend to store card numbers ourselves; checkout will be hosted by the processor.
File handling — policy pending implemented controls
Our file-handling policy is not final because the controls it would describe are not implemented yet. We are not going to publish a retention period, encryption statement, or access-control claim before the mechanism exists.
The intended service will limit access to authorized customer and reviewer accounts. Until those controls are completed and verified, treat them as plans rather than commitments.
Who would see your documents
At launch, your documents would be accessible to your own organization's users, and to Closeout Signal reviewers performing targeted human review of unresolved exceptions.
Automated processing would involve a third-party language model provider for document analysis. We will name the provider and the data terms on this page before the service accepts real documents.
What we are not claiming
We are not claiming any certification (such as SOC 2 or ISO 27001). We are not claiming that documents are processed only within a particular jurisdiction. We are not claiming a guaranteed deletion timeline.
If any of these matter to your contract, tell us before the pilot and we will answer specifically rather than generically.
Contacting us about data
Questions about this privacy draft can be sent to closeoutsignal.review@gmail.com. Before the service opens, this page will explain how to request access, correction, or deletion.