TENANT
ISO
Organization isolation
Every query is scoped to the signed-in tenant. Client workspaces for CROs do not share inventories, analyses, or exports.
Security · ZRR
RAW · NEVER STORED
Zero raw data retention is not a slogan
Process data ephemerally, generate high-value outputs, and delete raw data immediately. That is the architectural rule — not a marketing toggle.
- SOURCEDELETED
- TEXTNOT PERSISTED
- RESULTSTRUCTURED
- TRAILLOGGED
01 · RETENTION MATRIX
| Content type | Retention | Stored long-term? |
|---|---|---|
| Original uploaded files | Always zero | No — deleted from storage after processing |
| Extracted raw text from the source | Always zero | No — not stored as a permanent source file |
| Structured analysis results | Tenant setting: Zero / 30 / 90 / 180 / Unlimited | Yes — the official system of record |
| Generated packages (amended protocols, plans, exports) | Same tenant setting | Yes — generated artifacts, not the source file |
Deletions are written to the audit trail. Temporary storage exists only for the active processing session (for example “view original” while work is in flight).
02 · CONTROLS
What sits around the analysis
REVIEW
HITL
Roles & review
Segregation of duties on audit packages. Review & Approve is a first-class queue, not a comment thread on a PDF.
TRAIL
LOG
Audit trail
Analysis, export, archive, and raw-file deletion events are logged. Soft-archive keeps history without leaving raw sources behind.
INGEST
CHECK
Validated uploads
Declared file types are not trusted on their own. Files are checked on the server before they are processed.
CACHE
SAME
Consistent re-analysis
Identical content in the same organization reuses the official analysis. You get a stable result and you do not re-process the same package.
RESULT
LOCK
No silent model override
An optional independent review never becomes the official result unless a person promotes it through review.
03 · DEFAULTS
DEFAULT
ZERO
Zero Retention tenants
New organizations default to Zero Retention for generated content as well. You can lengthen the window for analyses and amended packages. You cannot opt original files into long-term storage.
TRUST COPY
HITL
What we tell users in-product
Residual model variability is disclosed next to analysis results. Official records are structured fields, not a chat transcript. Scanned PDFs with near-empty text are stopped before they become a false analysis.
Security review · HANDOFF
Walk through the model with your QA / IT team
We will map SolaraForge to your retention SOP, not the other way around.