Ts
Security
Here is exactly how your data is handled.
Last updated: April 8, 2026
All data is encrypted in transit and at rest using industry-standard encryption. Database connections are encrypted.
Original files are stored securely and auto-deleted after 30 days. You can delete them immediately at any time. When you delete a project, all associated data is permanently removed. No soft-deletes.
Drawings are processed for extraction only — never used to train, fine-tune, or improve any model. Proprietary content is not shared across accounts.
We comply with Canadian (PIPEDA), European (GDPR), and California (CCPA) privacy regulations. You can export all your data or delete your account at any time through account settings. We process data only for the purposes you authorize.
Hosted on managed cloud infrastructure with automatic failover. Rate limiting on all endpoints. Structured audit logging with request correlation.
Passwords are securely hashed and never stored in plaintext. Short-lived sessions with automatic rotation. Brute-force protection with account lockout. Session invalidation on password change.
Upload
Your file is encrypted in transit and at rest. No other user or Tagsight employee can access it.
Processing
The file is read by our extraction engine in an isolated process. It is never copied, shared, or sent to third parties.
After extraction
Original file is stored securely for review. Auto-deleted after 30 days, or you can delete it immediately from the export screen.
When you delete
Delete your project and all associated data is permanently removed. No soft-deletes, no residual copies.
Never
Your files are never used to train AI models, never shared across accounts, and never accessed by Tagsight staff unless you explicitly request support.
Your files are processed in isolated environments, never shared across users, and never used for AI training. Drawings are encrypted in transit and at rest. Original files auto-delete after 30 days, or you can delete them immediately. If your project requires a data processing agreement, see our DPA.