Is my data secure?

Only Sealed keeps them away from outside AI. Standard may use an outside AI provider, on terms that bar training.

The modes also differ in who can read them.

Sealed

• Runs on NexQloud Sealed, in AMD SEV-SNP confidential virtual machines.
• No one sees your documents without your consent. Exceptions go to you or your broker.
• The working copy is cryptographically erased after the run, and you get a signed receipt anyone can check against AMD's keys.

Standard

• Runs in the NexQloud cloud, plus an outside AI provider if one is used, only on terms that bar training.
• Only named NexQloud staff can open them, to fix an exception or answer a support request, and every access is logged.
• Documents are kept for the engagement, then deleted on schedule.

Both modes

• Your broker receives the claim package and the CSV; we see claim totals, for billing.
• We never ask for your ACE login or bank details.
• Where processing runs: see Where is my data processed and stored?
• Security program status: SOC 2 Type 2. The report is available under NDA on request.

Sealed has limits too; read them before you rely on it.