.svg){kind=icon}
Security & Trust
How Olivra protects your compliance program
Trade compliance data is sensitive by nature. Here's exactly how we handle it, who touches it, and what we monitor on your behalf.
Your documents are never used to train AI models
Olivra uses Anthropic's Claude to read your compliance documents, extract facts, and monitor regulatory changes. Your documents, extracted data, and compliance program are never used to train Claude or any other AI model, by Anthropic or by Olivra. Anthropic processes your data solely to generate your results, under an enterprise agreement that prohibits training on customer content.
Who has access to your data
Olivra runs on a small, named set of infrastructure providers. We don't sell, share, or license your data to anyone outside this list.
- Supabase— database and document storage
- Vercel— application hosting
- Anthropic— AI processing (Claude)
- Resend— transactional email delivery
Encryption at rest and in transit
All data is encrypted at rest and encrypted in transit (TLS 1.2+). Documents are encrypted the moment they reach storage.
What we monitor, and how honestly we label it
Olive monitors regulatory sources continuously and maps changes back to your program's specific sections. Every source below is labeled honestly:
- Live— has produced a verified event mapped to at least one program section.
- Connected— polled on schedule; hasn't yet produced a mapped event.
- CBP CSMS (Cargo Systems Messaging Service)Live
- CBSA Customs NoticesLive
- DHS UFLPA Entity ListLive
- Federal RegisterLive
- OFAC Sanctions ListsLive
- U.S. Bureau of Industry and SecurityLive
- USITC Harmonized Tariff ScheduleLive
- USMCA Trade UpdatesLive
- BIS Entity ListConnected
- Diario Oficial de la Federación (SAT / SHCP trade rules)Connected
- WCO UpdatesConnected
Your data, your control
You can request full deletion of your company's data at any time. We delete it within 30 days of request, across our primary database and every subprocessor above.
Considering a deeper security review?
We're glad to sign a mutual NDA before any technical deep-dive, security questionnaire, or pilot data-sharing conversation. Reach out at security@olivra.io to start.