Private storage
Documents remain in private storage and access is subject to authentication and permissions.
Security and privacy
Security for documents that must stay in the right hands.
International trade operations involve sensitive commercial, financial and logistics information. TradCheck supports document analysis with access controls, traceability and data-protection practices.
Security and privacy are part of the product architecture — not a separate promise from the operation.
Your documents remain under your company's control.
Company isolation
Processes, documents and results are scoped to the authorized company and user.
Traceability
Relevant actions can be recorded to show what happened, when it happened and who performed it.
Responsible AI use
Document content is treated as untrusted data and is not used for general AI training without explicit contractual authorization.
Protected access
Temporary access links and server-side permission checks reduce unnecessary document exposure.
Retention and deletion
Retention and deletion follow the applicable plan, contract and policy, including the technical backup cycle.
Protection throughout the analysis lifecycle
- 01Upload
- 02Validation
- 03Private storage
- 04Processing
- 05Professional review
- 06Retention or deletion
Company isolation and access roles
Authorization must be validated on the server against the user, company, process, document and assigned role.
- Administrator
- Manager
- Analyst
- Reader
- Restricted support
How AI uses documents
AI supports extraction, comparison and identification of potential discrepancies. Instructions found inside documents, images, spreadsheets, comments or metadata are treated only as untrusted document content.
TradCheck supports the analysis. The decision remains with the responsible professional.
Retention, deletion and audit
Retention depends on the applicable plan, contract and policy. Protected backups may remain during their technical retention cycle. Required audit records are handled according to the applicable policy.
Privacy and Brazilian data-protection context
Data processing must observe applicable law, including Brazil's General Data Protection Law (LGPD), according to each party's role. TradCheck does not claim an absolute security guarantee or a certification it has not obtained.
Services and incident response
A detailed subprocessor list will be published with supplier, purpose, data category, processing location, policy link, status and review date as the operation evolves. No supplier is listed before verification.
- 1Identification
- 2Containment
- 3Investigation
- 4Impact assessment
- 5Communication
- 6Correction
- 7Prevention of recurrence
Security also depends on your team
Customers remain responsible for controlling their users, protecting credentials, confirming authority to upload documents and deciding how to proceed with each operation.