How we handle your files

You are dropping unpublished promotional material onto a website. Here is exactly what happens to it — in thirty seconds, no legalese.

Your files are used only to produce your review

We never train models on customer content — ours or anyone's. The review is generated by Anthropic's Claude via their API, which does not use API inputs for training. Anthropic is our one sub-processor for model inference; LlamaIndex processes document layout.

Encrypted in transit and at rest

TLS on the way in; server-side encryption in storage.

Anonymous sessions leave nothing behind

If you don't sign in, your files and findings are deleted when your session ends — with a hard sweep after 24 hours as a backstop. “Nothing persists” means nothing persists in the bucket, not just on the screen.

Signed-in users own their data

Kept until you delete it. Delete is a real delete from storage: objects immediately, backups within 30 days. The deletion itself is logged.

No human at Mantir opens your documents

Except with your permission, to debug a problem you've asked us to look at.

Hosted in the US

What we don't claim

We are not HIPAA-certified or SOC 2-audited today, and we won't say otherwise. If your organisation needs contractual data terms, a DPA, or a security questionnaire, we write those per customer — talk to us.

Last updated 2026-09-10. Questions: hello@mlragent.com.