Security & Confidentiality
Written for people who handle law-enforcement interviews, court audio, and other material that must not leak. Plain answers, no badges we haven't earned.
The short version: your audio is processed on systems we operate — never sent to
third-party AI services — never used to train AI, and automatically deleted 14 days
after your draft is delivered.
Where your audio goes (and doesn't)
- No third-party AI APIs. Transcription, speaker identification, and formatting run on computing infrastructure operated by us. Your recordings are never submitted to OpenAI, Google, or any external AI service.
- No AI training. Your audio and documents are used for exactly one purpose: producing your transcript. We do not train, fine-tune, or improve AI models on customer content.
- US-based storage. Uploaded files and drafts are stored on servers in the United States (AWS, N. Virginia).
Retention: deleted on a schedule, automatically
- Audio, templates, and finished drafts are automatically deleted from our active systems 14 days after your draft is delivered. This is enforced by an automated daily job, not a manual promise.
- Residual copies inside our encrypted disaster-recovery backups expire within 30 days.
- Your account information (name, email, job history metadata) is kept while your account exists and removed on request.
Access and transmission
- All transfers are encrypted in transit (TLS 1.2+). There is no unencrypted path to our servers.
- Access to customer files is limited to the personnel who produce your transcript.
- Uploads require a verified account tied to a working email address — there is no anonymous upload.
- Passwords are stored as salted hashes; we cannot read them.
Payments
All payment processing is handled by Stripe (PCI DSS Level 1). Your card details never touch our servers.
Working with your obligations
- Shop-plan subscribers get a signed confidentiality / non-disclosure agreement — many transcription shops have their own paper, and we're happy to be on it.
- Need a different retention window, or immediate deletion after download? Ask — per-account retention settings are available.
What we don't claim
We're a young service and we won't decorate this page with certifications we don't hold. No SOC 2 or CJIS certification yet. What you get instead is a precise, truthful description of how your data is handled — and a direct line to the people running the system: [email protected].
Reporting a security concern
Found something that worries you? Email [email protected] with "SECURITY" in the subject. We read those first.
VerbaDraft is operated by JuiceBit LLC. Last updated: August 24, 2026.