How Archevi Protects Your Family's Privacy

When you upload important family documents - medical records, financial statements, legal papers - privacy isn't optional. It's essential.

That's why Archevi is built with privacy as a core design principle, not an afterthought.

Multi-Tenant Isolation

Every family gets their own isolated "tenant" in our system. This means:

**Database-level separation** - Your documents are filtered by tenant_id in every query
**No cross-family access** - The AI can only search within your family's documents
**Verified isolation** - We run automated tests to ensure no data leakage

Think of it like having your own private vault in a secure building - you can't access anyone else's vault, and they can't access yours.

Visibility Controls (Unique Feature)

Not all family members should see all documents. Archevi lets you control visibility:

| Visibility Level | Who Can See | |-----------------|-------------| | **Everyone** | All family members (including children) | | **Adults Only** | Admin and Adult members only | | **Admins Only** | Only family administrators | | **Private** | Only the person who uploaded it |

**Example use cases:**

Medical records → Adults Only
Teen's school reports → Private (teen can see their own)
Family vacation plans → Everyone
Financial statements → Admins Only

Member Types

Archevi understands that families have different age groups with different needs:

**Admin** - Full control, can manage members and billing
**Adult** - Can add/view documents, use AI chat
**Teen** - Limited access based on visibility settings
**Child** - Restricted access, parental oversight

Canadian Data Residency

Your data is stored in Canada (DigitalOcean Toronto region), subject to Canadian privacy laws (PIPEDA). We don't transfer your documents to US servers or share them with third parties.

AI Security

Our AI-powered search has built-in guardrails:

**Input sanitization** - Detects and blocks prompt injection attempts
**Output filtering** - Prevents system prompt leakage
**PII detection** - Warns when sensitive information is detected (coming in v0.7.0)
**Tenant-scoped queries** - AI can only access your family's documents

What We DON'T Do

❌ We don't sell your data
❌ We don't train AI models on your documents
❌ We don't share your content with third parties
❌ We don't use your documents for advertising
❌ We don't transfer data outside Canada

Coming Soon: Enhanced Security

We're working on additional security features for v0.7.0:

**Two-factor authentication (2FA)** - Extra login protection
**Audit logs** - See who accessed which documents when
**PII detection with Presidio** - Automatic redaction of sensitive info
**Content moderation** - Additional AI safety guardrails

Questions About Privacy?

We're transparent about how we handle your data. If you have questions, check our [Privacy Policy](https://archevi.com/privacy) or contact us at [email protected].

Your family's privacy is our top priority.