Edvami legal

Privacy Policy

Effective 29 August 2026

This policy explains how Edvami handles information when an organisation or its authorised users use the Edvami website, desktop application, managed pilot, and related document trust services.

Information we process

We process account and workspace information such as names, business email addresses, organisation membership, roles, support requests, and service activity. When a user stores or imports a document, Edvami processes the document, its filename and source details, cryptographic fingerprints, verification results, and audit records needed to provide the service.

Google Drive data

If a user chooses to connect Google Drive, Edvami requests read access so the user can view available files and choose what to import. The desktop application stores the Google authorisation token on that user’s device. Edvami records limited file metadata needed to display the import list. A file is downloaded and added to the Edvami workspace only when the user chooses to import it.

Google API disclosure. Edvami’s use and transfer of information received from Google APIs will follow the Google API Services User Data Policy, including its Limited Use requirements.

How information is used

We use information to authenticate users, operate the shared workspace, encrypt and store selected documents, create and verify proof records, maintain audit history, provide support, secure the service, and improve reliability. We do not sell Google user data or customer document content.

AI assisted features

When an authorised user deliberately runs an AI assisted review, relevant document or evidence content may be sent to Edvami’s contracted AI service provider to produce the requested result. AI features are not run merely because a Google Drive account is connected. Users should review AI generated results before relying on them.

Storage, security, and retention

Imported document content is encrypted and stored within the organisation’s Edvami workspace. Cryptographic fingerprints and audit evidence are retained to support integrity verification. Access is scoped to the organisation and the user’s assigned role. We use technical and organisational safeguards designed to protect information, but no service can promise absolute security.

Workspace information is kept while the organisation uses Edvami and as needed for security, legal, and audit purposes. Disconnecting Google Drive removes the locally stored Google token. Removing Drive access does not automatically delete documents that a user already chose to import into Edvami.

Service providers and disclosures

We may use infrastructure, storage, email, security, and AI providers to operate Edvami. They process information only to provide those services under applicable agreements. We may disclose information when required by law, to protect users or the service, or as part of a business transaction with appropriate safeguards.

Your choices

Users can disconnect Google Drive in the application, revoke Edvami from their Google Account permissions, and ask their workspace administrator to manage imported documents or account access. Organisations may contact us to request access, correction, deletion, or export where applicable. Some proof and audit records may need to be retained to preserve security and integrity evidence.

Changes and contact

We may update this policy as the product or legal requirements change. The current version and effective date will remain available on this page. Questions and privacy requests can be sent to team@edvami.com.