Development transparency notice
Privacy & data handling
This page explains how the ProvenLeaf development preview currently handles information. It is not the final customer privacy notice or data-processing agreement. Wolf Rock Tech operates ProvenLeaf.
Version 1 · 27 August 2026
Customer-data gate remains closed
Use synthetic or safely redacted information only. Do not upload real customer documents. Malware scanning, production retention and deletion procedures, and approved regional AI processing are not yet complete.
Where data is handled today
| Activity | Provider | Location | Current handling |
|---|---|---|---|
| Application requests | Vercel | London, UK (lhr1) | Server-side uploads, retrieval authorisation and analysis orchestration run in London. Static delivery and operational metadata may use Vercel’s global infrastructure. |
| Database and document storage | Supabase | London, UK (eu-west-2) | Private PDF originals, account records, organisation data, extracted candidate facts and review history are stored in the hosted development project. |
| AI document analysis | OpenAI API | Global at present | The complete synthetic PDF is submitted to the Responses API with response storage disabled. EU regional processing and Zero Data Retention have been requested but are not enabled. |
| Authentication email | Supabase Auth and Resend | Provider infrastructure | These services process email addresses and sign-in delivery data. Document contents are not sent through authentication email. |
Information processed
- Account email, authentication and organisation membership.
- Synthetic manufacturers, products, versions and batch records.
- Synthetic PDF originals, filenames, hashes and custody metadata.
- Model-extracted candidate facts, provenance and human review events.
- Limited operational and security records without intentional raw document content.
How it is used
- Provide and secure the development service.
- Maintain tenant isolation and immutable document custody.
- Extract candidate facts for explicit human review.
- Diagnose failures and prevent misuse.
- Evaluate the product using synthetic test material.
AI processing
ProvenLeaf currently sends the full synthetic PDF to the OpenAI Responses API for document classification and candidate-fact extraction. Requests use store: false, no hosted tools and a strict structured-output schema.
OpenAI states that API data is not used to train its models by default. However, the current Global project is not enrolled in Zero Data Retention and provider abuse-monitoring retention may still apply. Wolf Rock Tech has requested access to EU regional storage and processing with Zero Data Retention.
Model output is treated as untrusted candidate information. It is not an automated legal-compliance, authenticity, safety, efficacy or batch-acceptance verdict.
Security and access
The preview uses email magic-link authentication, explicit organisation membership, database row-level security, private object storage, short-lived document access links, immutable document versions and SHA-256 custody hashes. These controls reduce risk but do not make the preview production-ready or independently certified.
Retention and deletion
A production retention schedule and customer deletion process have not yet been approved. Document versions are immutable in normal application workflows so that review history is not silently rewritten. Appropriate administrative deletion, contractual retention and audit-preservation rules must be defined before an external customer-data pilot.
Cookies and contact
The preview uses essential authentication cookies. Wolf Rock Tech has not intentionally configured advertising or behavioural analytics cookies.
During closed development, direct privacy questions to the person who invited you to the preview. A dedicated privacy contact, formal privacy notice and customer data-processing terms will be published before external customer use.