Where your data goes.

Your workspace (stays with us)

Each firm gets its own workspace at yourfirm.zrico.app, with its own databases, file storage and private network. It runs on our server in a DigitalOcean data center in New York.

• Chats, uploaded documents and document search: stored in your firm’s own databases.
• Document search is computed on our own server. Your documents are not sent to any outside service to be indexed.
• Kept until someone deletes them, or for the period your firm chooses: 30, 90 (the default) or 365 days of not being used, or until deleted. Uploaded files that no remaining chat or assistant uses are deleted after the same period.

The AI model: Claude by Anthropic

When someone sends a message, the message and the context it needs (earlier messages, excerpts of documents) go to Anthropic’s business API.

• Processed only in the United States.
• Never used to train AI.
• Anthropic keeps API data for up to 30 days to detect abuse (content flagged for a policy violation up to 2 years), then deletes it.
• Your staff’s names and email addresses are not sent to Anthropic.

Web search: off unless you turn it on

Web search is off for every new firm. If your firm’s owner turns it on, each chat still starts with it off; staff turn it on when they need current information. Then the search terms the AI writes (never your documents) go through our own search server to public search engines, such as Google and Bing, and the pages found are fetched so the AI can read them. Answers that used web search say “Searched the web” and list their sources. When web search is off, our search service is not connected to your workspace at all.

Other AI models: off unless you turn them on

Claude is the only AI model for a new firm. Your owner can also turn on GPT (OpenAI) or Gemini (Google) in Settings. Their processing is not limited to the US, and we say so before you turn them on.

Usage records (no content)

Our AI gateway counts usage for your budget and your Usage & audit report: who used AI, which model, how many tokens, the cost, and when. It never stores prompts, answers or files. Per-request records are deleted after 90 days; daily totals stay while your account is open.

Backups

Every night we back up your workspace, encrypted on our server before it leaves, to Cloudflare R2 storage in the US. Cloudflare cannot read it. We keep 7 daily, 4 weekly and 12 monthly backups, so deleted data can remain in an encrypted backup for up to 13 months.

Email, billing and the website

• Email (Resend): invites, password resets, billing notices and receipts, and replies to support requests. They never contain your chats or documents, except anything you choose to write in a support request.
• Billing (Square): your card details go to Square, not to us.
• Network and security (Cloudflare): every visit passes through Cloudflare, which sees IP addresses to block attacks.
• No analytics, advertising or tracking scripts on this site, the dashboard or your workspace.

Who at Zrico can see your content

Nobody, as a matter of policy and design. Our admin tools cannot show chats, files or prompts, there is no “sign in as”, and support never asks for them. In the rare case you ask us to open your data (for example to restore a deleted chat), we do it only with your owner’s written approval, and it appears in your firm’s audit log with the reason. Every other action our staff take on your account appears there too.

Logs

Web access logs (IP address, browser, host and page address, and Cloudflare’s request id; no query strings, cookies or other headers) are kept for 7 days and server logs for 30 days, for security. They never contain prompts, answers or file contents.

What we don’t have (yet)

No SOC 2, ISO 27001 or HIPAA agreement. No zero-data-retention agreement with Anthropic yet. The server’s own disk is not encrypted at rest yet (backups are); moving to encrypted storage is planned. We’ll update this page as these change.