Trust and security
Last updated: October 17, 2026
How Placetta protects your business's information, which companies process it, and what isn't finished yet. Placetta doesn't hold a security certification today. The roadmap below says where we are.
In placeWorks in production today.
Rolling outBuilt and tested, and being switched on in our servers and database.
In progressStill being built or prepared.
Your approval comes first
Odelia prepares the work. An owner of your workspace decides. Nothing is filed with an agency, paid or sent to anyone without an owner's approval in the Placetta app.
Filings In place
Only an owner can approve a filing, and our database refuses a filing request from anyone else. Before the approve button works, every line is checked again: a blank line, a placeholder left in, a Social Security number, or a form that belongs to another city's agency stops it.
Payments In place
Spending is off until an owner turns it on and sets the rules: what Odelia may ask to buy, from whom, and up to how much. An owner approves every purchase, and above an amount the owners choose, a second owner approves too. Placetta never holds or moves your money. Someone on your team pays on the agency's or seller's own page.
Messages In place
Emails Odelia drafts to an agency, a landlord or anyone else go out only after an owner approves them, from your own connected mailbox.
Requests from outside the app
If you set them up, you can also reach Odelia by text message, iMessage, WhatsApp, phone call, Slack or Lark. Whatever arrives that way, she can't file, pay or send anything from there. She puts it up for approval and sends you a link to it in the app. Team chats in WeCom, DingTalk and Microsoft Teams only receive updates; they can't give Odelia instructions.
Rolling outA message from outside the app could be a forwarded letter or a forgery, so it can't change your business's facts or name either. Odelia puts the change on a card that shows the old value, the new one, and who asked from where, and nothing changes until an owner confirms it in the app. From outside the app she also can't save to her memory, set up or stop routines, change or remove stores, or remove deadlines. A plain SMS, the easiest message to forge, can only look things up and draft.
Audit trail
In placeEvery action by Odelia, by you and your team, by our team and by agencies is recorded in your workspace's audit trail: what happened, to what, who did it and when. Everyone on your team can read it, and you can export it in Settings. Nobody using the app can edit or delete an entry.
In placeEach time a saved agency login is opened, by our filing software or by someone on our team, the opening goes into the audit trail.
Rolling outThe database itself will refuse to edit or delete any entry, from anyone, our own servers included, and will stamp each entry with its own clock instead of trusting the writer's.
How we handle your data
Encryption In place
Everything between your browser, our servers and our database travels encrypted, over HTTPS with TLS 1.2 or newer. Your workspace, documents and audit trail are stored by Supabase in its US East region and encrypted at rest.
Passwords and keys In place
Saved agency logins, the access tokens for accounts you connect, and the links to your team chats are kept in Supabase Vault, encrypted with a key held outside the database, and only our server can read them. Our own service keys stay in server settings, never in the app or the website.
Our team's access In place
In the app, someone on our team can open customer records or a saved login only after signing in with two-step verification. You can turn on two-step sign-in, and a PIN for sensitive settings, in Settings.
Social Security numbers and ITINs
In placeOur filing software never sends a Social Security number or ITIN to an agency. The signer writes it by hand on the signed copy, or the agency collects it on its own site.
Rolling outOdelia's tools refuse to save one in an application or in your business facts, and an application that holds one can't be approved. If a document you upload shows one, it's stored as you uploaded it, so cover the number first if you can.
Deleting your data
In placeDeleting your account in Settings deletes the workspaces you own alone, with every file stored in them, except records the law requires us to keep. You can also email support@placetta.com to have any document or workspace deleted.
Rolling outOwners can delete a single document in the app, the stored file and its record together, unless a filing in progress still uses it. Each deletion leaves a line in the audit trail.
How long we keep things
Rolling outA daily cleanup removes records we no longer need: chat bot event records after 30 days, unfinished account connections after a day, records of scheduled checks after 180 days, and page view counts left untouched for 400 days. A year after an Odelia task finishes, its working notes are cleared; your request and her answer stay. Our Privacy Policy says how long everything else is kept.
Backups In progress
We don't keep database backups yet. See the roadmap below.
AI and your data
In placePlacetta doesn't use your content to train AI models, and doesn't sell it. Here is which model providers may process it, and when.
Anthropic
Claude models from Anthropic do the independent review of finished work, web research, and the work of our software that files on agency websites, and they take over Odelia's work whenever no other model is set up or one can't answer. Anthropic may see everything in a request, including your files. Its commercial terms don't allow it to train models on what we send.
Google (Gemini) Rolling out
When our paid Google account is switched on, Gemini models do most of Odelia's day-to-day work, including reading your files. We use Gemini only on Google's paid tier, whose terms say prompts aren't used to improve Google's products. Google's free tier may use them, so without the paid account, Gemini receives nothing of yours.
Backups: Groq, Cerebras and OpenRouter Rolling out
If Gemini and Anthropic both can't answer, an open model (gpt-oss-120b) on Groq, Cerebras or OpenRouter answers instead. These backups never receive your files, only the text of the request.
OpenAI and DeepSeek Off by default
Our software can also use models from OpenAI or DeepSeek, but both stay off unless we switch them on. DeepSeek, which is based in China, would never receive your files.
Calls and spoken replies
On phone calls, Telnyx runs Odelia's voice: the speech recognition, the AI model that talks with you, and the voice you hear. Every call opens with Odelia saying she's an AI and that the call is transcribed. Placetta doesn't record call audio. In the app, Microsoft Azure turns her replies into speech when you have them read aloud.
Email to Odelia Rolling out
You'll be able to email Odelia, or forward her an agency's letter, from the address you sign in with. Anyone can fake the sender of an email, so she acts only when the message proves where it came from: a valid DKIM signature from your email domain that covers the sender line and the whole message. We check that signature ourselves on the raw message, or use our email provider's own DMARC or DKIM verdict, never headers the sender can write. Signing keys are looked up in public DNS, through Cloudflare and Google.
If a message can't be verified, nothing starts, and you get a short note saying why. Email from an address that isn't a Placetta account gets no reply at all. Nothing is filed, paid, sent or deleted by email. Odelia answers with a link to the approval in the app.
Subprocessors
These companies process customer information on our behalf. The list is taken from our code: a service that isn't wired in there isn't here. "When used" and "If you connect it" mean the company receives nothing until that feature is on or you connect it.
Running the service
Database, file storage, sign-in and server functions, in its US East region. Stores your workspace, documents, texts and audit trail.
Hosts placetta.com and the app.
Serves the typefaces on placetta.com and in the app. It sees your IP address and browser, nothing else.
Processes payments for your plan. We never see full card numbers.
Sends our email: sign-in links, reminders, filing updates and headquarters summaries. It can also receive email sent to Odelia.
Claude models: Odelia's work when no other model is set up or can answer, the review of finished work, web research, and filing on agency websites.
AI models
Gemini models for Odelia's work, only on Google's paid tier.
A backup open model. Never receives your files.
A backup open model. Never receives your files.
A backup open model. Never receives your files.
Models our software can use. Off unless we switch them on.
Models our software can use. Off unless we switch them on, and never receives your files. Based in China.
Messages, calls and filing
Texts and calls with Odelia, including the voice, speech recognition and AI model on calls. Sends filings by fax.
Texts with Odelia over iMessage, with RCS and SMS as fallback.
Messages with Odelia on WhatsApp.
Email to and from Odelia, when we use it instead of Resend.
Prints and mails filings sent by certified mail.
Reads Odelia's replies aloud in the app.
Runs our software that files on agency websites, in the US (Oregon).
Provides the web browser that software can use.
Services you connect
Sign-in with Google, Gmail, Google Calendar and Google Drive.
Sign-in with Microsoft, Outlook Mail, Outlook Calendar and Microsoft Teams.
Importing documents.
Reading gross receipts for tax registrations.
Status updates, and asking Odelia in Slack.
Status updates, and asking Odelia in Lark.
Status updates to a group you choose.
Status updates to a group you choose.
Compliance roadmap
Placetta doesn't hold SOC 2 or any other security certification today. Here is where each piece stands.
SOC 2 Type I In preparation
We're writing down our controls and the risks they answer, starting with an inventory of every AI model we use and what it can see, ahead of an independent audit.
Daily database backups In progress
We don't keep database backups yet. Turning on daily backups is under way.
PIPL, for people in China In preparation
Our Privacy Policy already says who receives information about people in China outside China, why, and how they can use their rights. Next is a separate notice and consent in the app for people in China, as PIPL requires before personal information leaves the country.
Texting rules: TCPA and 10DLC
In placeWe text and call only a number you confirm with a code, keep a record of that consent for 5 years, stop texting when you reply STOP, and hold updates during your quiet hours.
In progressCarrier registration (10DLC) for our US texting number.
California privacy rights (CCPA) In place
You can download your workspace data and delete your account in Settings, and we answer privacy requests within 45 days. We don't sell or share personal information.
AI backup providers In progress
Written confirmation from each AI backup provider that it doesn't train on or keep what we send.
Incident log In place
We keep an incident log: what happened, the impact and the fix. Incident log kept since . Incidents that affected customers are listed here.
Report a security issue
If you think you've found a security problem in Placetta, please tell us. Write in English or Chinese.
- Email security@placetta.com with what you found and the steps to reproduce it.
- Use only your own account and test data. Don't access, change or delete other people's information, don't disrupt the service, and don't try to trick our team or our customers.
- Give us reasonable time to fix it before you tell anyone else.
We'll confirm we got your report, keep you posted until it's fixed, and credit you if you'd like. We won't take legal action against anyone who reports a problem in good faith under these rules. Our security contact is also published at /.well-known/security.txt.