Privacy policy

Who we are

Tesuvi provides audit software for pharma and biotech quality teams. This policy explains what we process when you use tesuvi.com and the Tesuvi application, and the commitments we make about it. Questions go to contact@tesuvi.com.

What we process

• Account information — name, work email and sign-in credentials, managed through our identity provider.
• Audit content — audits, document requests, uploaded documents, notes, findings, reports and messages that customers and their invited participants put into the product.
• Operational records — an append-only audit trail of actions taken in the product, and the technical logs needed to run and secure the service.

This website itself sets no analytics or marketing cookies. The application uses authentication cookies to keep you signed in.

How we use it

We process this information to provide the service: running audits, delivering notifications by email, scanning uploaded files for malware, and operating AI-assisted drafting features. We do not sell personal information and we do not use your data for advertising.

Customer content and AI

We do not use customer content to train shared AI models by default. Access to documents for an audit does not grant a right to train models on them — retention, training rights and model use are kept contractually and technically separate.

We contract with the company that controls the data. Evidence is not copied into third-party-controlled workspaces.

External access and expiry

External audit participants receive time-limited access that expires automatically. Expiry ends access to the workspace; it is not the same as deletion, and document retention follows the agreement with the customer that controls the data.

Subprocessors

We use the following providers to run the service:

• Clerk — Authentication and identity.
• Neon — Database hosting.
• Vercel — Application hosting and file storage.
• Resend — Transactional email delivery.
• Anthropic — AI processing for assisted drafting.
• Inngest — Background job orchestration.
• Cloudmersive — Malware scanning of uploaded files.

Security

Access to audit content is scoped by role and by audit. Uploaded files are scanned for malware before they are available for download. Actions in the product are recorded in an append-only audit trail. Data is encrypted in transit.

Your rights and contact

To access, correct or delete personal information, or to ask anything about this policy, contact us at contact@tesuvi.com. Where your information is controlled by your employer or the company that invited you to an audit, we may direct the request to them.

Changes

We will update this policy as the product and our legal review progress, and the date at the top of this page will change when we do.