Trust Center

Security and data handling.

Information about how PolyQ Intake handles account and interview data, and where to request supporting documentation.

Last updated · September 14, 2026

Sub-processors

Providers, processing purposes, and the data used by each integration.

System status

Availability information and how to report an interruption.

Data Processing Addendum

Review the proposed terms and confirm the applicable agreement with our team.

Business Associate Agreement

Discuss agreement scope for transcripts, audio, documents and images uploaded by respondents, and derived interview records.

Application controls

Account access. Operator requests verify signed identity tokens and check company ownership. Respondents use a token scoped to their interview.
File access. Uploaded evidence is stored privately. Authorized downloads use temporary signed URLs.
Secrets. Deployment secrets are supplied through SST secret configuration and server environment variables.
Retention and deletion. Interview retention follows the company setting, with a default of 90 days. Cleanup removes provider segments and uploaded evidence before removing the interview record. Deletion is asynchronous and retries provider failures.
Temporary processing data. Redis holds live transcript turns, interview state, and configuration job data with expiration periods. Browsers may retain setup recovery data for the current tab.

Supporting documentation

Contact security@polyq.ai to confirm available audit evidence, signed agreements, provider data-use terms, and suitability for your intended use. This page does not establish certification or confirm that a particular regulated workflow is covered.

Report a security issue

Send reproduction steps to security@polyq.ai. Please avoid sending customer transcripts, credentials, or payment details.