Your data is safe. Here is exactly what happens to it.

We built Basquio for market research professionals who work with sensitive commercial data every day. We know what is at stake when you upload a file. This page explains precisely where your data goes, how it is protected, and when it is deleted.

Five things that are always true.

Your data is never used for training

Basquio uses the Anthropic API to analyze your files. Anthropic does not use API data to train models. This is not an opt-out. It is their default policy for all commercial API customers.

Anthropic policy

Processing happens in a temporary container

When you start a run, your files are loaded into a sandboxed container. The analysis runs, the deck is built, and the container is destroyed. Your source data does not persist inside the AI system after the run completes.

AI-side data is auto-deleted within 7 days

Anthropic retains API logs for up to 7 days for safety monitoring, then deletes them automatically. Zero-retention agreements are available for enterprise customers who need immediate deletion.

Anthropic retention policy

Encrypted in transit and at rest

Files are encrypted with TLS 1.3 during upload and download. Stored files are encrypted at rest with AES-256 on AWS infrastructure.

Your files stay yours

Basquio does not share, sell, or expose your data to third parties. Your uploaded files and generated decks are visible only to you and your workspace members.

What happens when you upload a file.

1

You upload your Excel or CSV

Encrypted with TLS 1.3 during transfer. Stored encrypted (AES-256) in your workspace.

2

A temporary container processes your data

The file is loaded into a sandboxed environment. The AI reads your data, runs the analysis, builds the charts, and writes the deck.

3

The container is destroyed

After the run completes, the processing environment is deleted. Your source data does not persist in the AI system.

4

You download your deck

The finished PPTX, narrative report, and data workbook are stored encrypted in your workspace until you delete them.

Who processes what.

Anthropic (Claude API)

AI analysis and deck generation

  • SOC 2 Type II certified
  • ISO 27001 certified
  • ISO 42001 certified (AI management)
  • No training on API data
  • 7-day auto-deletion
Anthropic Trust Center →

AWS (via Supabase)

File storage and database

  • AES-256 encryption at rest
  • TLS 1.3 in transit
  • SOC 2, ISO 27001, HIPAA eligible
  • US-East-1 region

Vercel

Web application hosting

  • SOC 2 Type II certified
  • Edge network with TLS
  • No persistent data storage

Need more? We are building for it.

We are working toward SOC 2 Type II certification for Basquio itself. Enterprise features like SSO, audit logs, and the option to route AI processing through your own cloud account (AWS Bedrock, Google Vertex AI) are on the roadmap.

If your organization has specific security requirements, reach out directly. We will walk through the architecture with your security team.

Security · How Basquio handles your data | Basquio