Private by default, not “public until you click hide”
Consulting engagements fail when sensitive materials leak across unrelated clients or internal workstreams. Evolve My Business AI is designed around projects as the primary boundary: uploads, drafts, and permissions live inside a project container. Inviting collaborators is intentional—there is no broad “everyone in the tenant sees everything” default that creates silent exposure as firms scale.
That design choice supports both external advisory and in-house strategy teams who run overlapping initiatives. It also makes procurement conversations easier: you can describe access control the same way you describe methodology—as part of delivery, not an afterthought.
Encryption, transport, and cloud reality
Web sessions use HTTPS (TLS). Backend services communicate over TLS for typical paths. Encryption at rest is provided by cloud infrastructure patterns appropriate to managed storage and databases; exact mechanisms can vary by component and region. We avoid marketing absolutes we cannot prove under a specific customer’s review—see Security for how we answer questionnaires.
AI processing without “mystery subprocessors”
Features that summarize or draft from client materials may rely on model providers under terms intended to restrict use of customer content for training public models. Your firm should still align uploads with client contracts and regulatory obligations. For subprocessors, retention, and cookies—including Google Analytics 4 with Consent Mode—read our Privacy Policy and the cookies section there.
Human-reviewed outputs as a security and quality control
Evolve My Business AI frames Quick Scans, Deep Dives, and Strategic Reviews as drafts your consultants refine. That is not only honest marketing—it reduces the risk of over-trusted automation in client-facing channels. Pair platform defaults with your firm’s sign-off matrix and training; see our blog on deliverables and accountability.
Incident reporting and vendor diligence
If you believe you have found a vulnerability, contact us through the channels on our Contact page with enough detail to reproduce the issue. For procurement packs, start with Security and supplement with your own legal and InfoSec review—we distinguish implemented controls from roadmap items such as formal SOC 2 attestation until completed.