Your 990s, audits and donor data never train anyone's model.
SOC 2 Type II audited, encrypted per tenant and isolated by design, for data your board would never want leaked.
Control summary
- Certification
- SOC 2 Type II, annual; ISO 27001 certified ISMS
- Encryption
- AES-256 at rest, TLS 1.3 in transit, per-tenant keys
- AI data use
- Zero training; contractual zero retention with model providers
- Identity
- SAML SSO with Okta, Microsoft Entra ID, Google Workspace; enforced MFA
- Access
- Role and document-level permissions; full audit log
- Hosting
- AWS us-east-1 and us-west-2; US data residency
- Backups
- Daily encrypted backups, 35-day retention, quarterly restore tests
- Testing
- Annual third-party penetration test; continuous dependency scanning
- Agreements
- DPA for all plans; HIPAA BAA on Growth and Enterprise
How AI drafting handles your data
- Drafts are generated from retrieval over your own tenant's vault only.
- Prompts and outputs are not stored by model providers and never used for training, under contract.
- No customer document is used to improve shared models, rubrics or templates.
- You can see which documents informed every sentence through citation tags.
Restrict what matters
- Executive compensation. Schedule J and payroll files visible to named finance roles only.
- Audit findings. Management letters restricted to the CFO and executive director.
- Clinical data. Aggregate UDS tables only; PHI handled under a BAA.
- Donor records. CRM sync limited to fields you choose.
“Enterprise security and zero data training gave our city council complete confidence.”
Ravi Castellanos-Moore IT Director, City of Westbrook
Report a vulnerability to security@elixirconsumers.com. See our security standards and subprocessors.
Questions, answered
Can we review your SOC 2 Type II report?
Yes. Request it through the contact page; we share it under NDA within one business day.
Where is our data stored?
In AWS data centers in the United States. Engineering staff in India access production only through audited, just-in-time access with customer data masked by default.
What happens to our data if we leave?
Export everything at any time. After cancellation, data and indexes are deleted within 30 days, or sooner on request, and deletion is confirmed in writing.
$ elixir trial --days 14
Stop letting high-value grant deadlines pass you by.
Upload a past 990 and a target NOFO. Watch ELIXIR CONSUMERS draft a cited Section 1 narrative in 90 seconds.