TRUST CENTER
Tao IP Trust Center.
Live service health, controls, documents and the companies that process your data.
Overview
Connections are encrypted, storage is encrypted at rest, and database rules keep each account to its own records.
- SOC 2 Type II
- Planned. No audit has started yet.
- Model training on your content
- Not allowed under our AI provider's terms
- Live status
- Checking our services
Reviewed 27 October 2026.
LIVE STATUS
Service health.
Read live from each provider's public status page, refreshed every minute.
- Tao IPOur site, portal and Tao AI
- WebsiteChecking
- PortalChecking
- CloudflareHosting, server code and network
- PagesChecking
- WorkersChecking
- CDN and cacheChecking
- DNSChecking
- SupabaseDatabase, sign in and file storage
- PlatformChecking
- AnthropicThe AI model behind Tao AI
- Model APIChecking
- ResendProduct email
- Email sendingChecking
- APIChecking
- StripePayments
- APIChecking
- PaymentsChecking
- GitHubRepository connection, only if you connect one
- APIChecking
Controls by category.
Data protection
- TLS on connections to the site, the portal and our providersImplemented
- Database and file storage encrypted at rest by our database providerImplemented
Access
- Sign in with an emailed link or Google; no passwords storedImplemented
- Database rules on every table limit each account to its own records and its company workspaceImplemented
- Testing workspace isolation with separate test accountsIn progress
Infrastructure
- Site, portal and server code hosted on CloudflareImplemented
- Database, sign in and files on Supabase, whose services hold their own SOC 2 reportImplemented
AI processing
- Content reaches our AI model provider only through its commercial API, whose terms do not allow training on itImplemented
- We train no models of our ownImplemented
Legal and confidentiality
- Mutual NDA accepted when you create an accountImplemented
- Your attorney sees every invention's disclosure, files and references, and your Tao AI conversation only as you share it, enforced by our server including file downloadsImplemented
Incident response
- Reads and writes through our server logged per matter, and the log is visible to youImplemented
- Security reports and questions reviewed by our team through the question formImplemented
Documents.
Risk profile
- Data handled
- Invention disclosures, files and Tao AI conversations; account data such as name, email and company
- Payment details
- Entered on Stripe's pages, not stored by us
- Where processed
- Not yet verified; we list locations once we verify them
Companies that process your data.
| Company | What it does | What it receives | Policy |
|---|---|---|---|
| Cloudflare | Hosting | All traffic to taoip.ai | Privacy policyof Cloudflare, opens in a new tab |
| Supabase | Database, sign in and files | Your account, matters, messages and files | Privacy policyof Supabase, opens in a new tab |
| Anthropic | The AI model behind Tao AI, and its web search | What you send to Tao AI and the queries it writes | Commercial termsof Anthropic, opens in a new tab |
| Resend | Product email | Email addresses and email content | Privacy policyof Resend, opens in a new tab |
| Team mailbox, sign in and analytics | Team email, your Google email if used, page visits | Privacy policyof Google, opens in a new tab | |
| PostHog | Product analytics | Page paths, events and masked replays of public pages | Privacy policyof PostHog, opens in a new tab |
| Stripe | Payments | Billing details you enter on Stripe's pages | Privacy policyof Stripe, opens in a new tab |
| Cal.com | Booking a call | Your name, email and chosen time | Privacy policyof Cal.com, opens in a new tab |
| GitHub | Only if you connect a repository, read only | The repositories you choose | Privacy statementof GitHub, opens in a new tab |
Ask for security information.
For a vendor review, a questionnaire, the controls summary or a security issue, send us a question.
- Please do not include invention details or attach confidential files.
