Data retention policy
Fulfil will retain Customer Data in accordance with its Data Deletion Policy, Backup Policy, and contractual commitments. Customer Data is retained for the life of the account and, upon request, for up to 30 days after termination of services to allow the customer to retrieve their data; data required to establish proof of a right or contract is retained for the duration required by applicable law.
Data archiving and removal policy
Fulfil will remove (archive and delete) Customer Data in accordance with its Data Deletion Policy and Backup Policy. On request, Fulfil hard-deletes Customer Data from currently-running production systems within 30 days. Fulfil deletes data within 30 days after the contract ends, except data legally required to be retained.
Data storage policy
Fulfil will store Customer Data in accordance with its Data Classification, Cryptography, and Backup Policies. Customer Data is stored in Google Cloud Platform as the primary system, with AWS S3 used for backups and as a disaster-recovery cold site; full database backups run daily. All Customer Data is encrypted at rest and in transit over public networks per the Cryptography Policy.
Data center location(s)
United States
Data hosting details
Data is stored in a postgres database that is encrypted at rest
Data hosting company
GCP, AWS
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Google Gemini (Gemini Flash family), through the Google Gemini API. We use it only to read the data from receipt files (PDF or image) that users upload.
LLM retention settings
We do not keep prompts or model output at the LLM provider. Google keeps API requests for a limited time only to detect abuse, under its paid-service terms, and then deletes them. Google does not use them for training.
LLM data tenancy policy
Fulfil sends a receipt file to Gemini API only when a user uploads it. Each request is stateless and has the data of one customer workspace only. We do not share data between customers. We don't use customer or Slack data to train or fine-tune models.
LLM data residency policy
Fulfil runs on Google Cloud in the United States. Receipt data and extracted results are stored in the Fulfil database of the customer workspace. Gemini API requests are processed on Google infrastructure.