Security
Built to keep evidence intact
Every file is fingerprinted when it arrives, every action is logged, and your data is stored and processed in Australia. None of it is used to train a model.
Book a demoActivity log
Castell Logistics · Supplier payments review- DDonna linked 14 payments to Harwick Supply emails, for Claire Donnelly9:21 am
- PSPhoebe Shaw downloaded Bank statement 0418.pdf · hash recorded9:14 am
- CDClaire Donnelly added Mailbox export · J. Brennan · 4,812 files fingerprinted8:52 am
Your data stays yours
No model training
Your documents, questions and answers are never used to train or improve any AI model. That promise is written into our Platform Agreement.
You own your data
Set how long deleted matters are kept and export your data at any time. When your account closes, everything is permanently removed.
A chain of custody from intake
Fingerprinted at intake
Each file gets a SHA-256 hash the moment it arrives, so you can prove it has not changed since. The MD5 value is kept too, for matching against other hash lists.
Custody recorded as it happens
Who brought each file in, when, and every hand it has passed through since, kept on the file’s own record.
Scanned before anyone opens it
Every file is checked for malware before it reaches a matter. Harmful files are destroyed and cannot be uploaded again.
Every download recorded
Each download is logged with who took it, when, and the hash of the file they took.
A full audit trail
Every action by your team and by Donna’s agents is logged and copied to append-only storage that cannot be quietly changed.
Roles set per matter
Permissions are set per matter and per document. Donna’s agents act for the person who asked and reach only what that person can.
Stored and processed in Australia
Your data is stored and processed in Australia, including AI processing and backups.
Encrypted in transit and at rest
TLS 1.2 or higher in transit, and AES-256 at rest with keys we manage in Azure Key Vault.
Our staff need your approval
Our engineers see your data only with your written approval, and only to fix a support issue you raised.
Three ways to deploy
Donna Cloud
Hosted on Microsoft Azure in Australia and managed by Donna. Ready in days.
Dedicated environment
Your own dedicated Azure environment, managed by Donna.
Your environment
Deployed in your organisation’s own cloud environment.
Compliance
ISO 27001
In progress
SOC 2 Type II
In progress
Donna is working towards ISO 27001 certification and a SOC 2 Type II report, with the controls for access, encryption, audit logging and incident response already in place.
Read the compliance overview