Your strategy stays yours
HillGenius keeps your work private, encrypted, and out of AI model training.
No model training
Your content is never used to train AI models, by us or by our AI providers. Our contracts with the providers forbid it.
Zero data retention
What you send to our AI features, including Research Desk, Ghostwriter and AI Analyst chats and drafts, is processed by our AI providers — Google, Anthropic, OpenAI and TypeSafe — under zero data retention agreements.
Encrypted in the United States
Your data is stored in the United States and encrypted in transit (TLS 1.2 or higher) and at rest. Our database, file storage and backups use AES-256.
Single sign-on
On Enterprise plans, an administrator can require Microsoft Entra single sign-on, so your MFA and Conditional Access policies apply and we never see your passwords.
Ethical walls
On Enterprise plans, a client workspace can be restricted to named people. No one else in your organization can open it or get its alerts.
Independently tested
HillGenius undergoes an annual penetration test conducted by Thoropass, a CREST-accredited testing provider. The most recent test was completed in August 2026.
You’re in control
- Required single sign-on
- On Enterprise plans, an administrator can require Microsoft Entra single sign-on for everyone in your organization. Your MFA and Conditional Access policies then apply, and we never see your organization's passwords.
- Idle timeout
- An administrator chooses how long an inactive session stays signed in, from 15 minutes to 30 days. The default is 30 days.
- Research Desk retention
- Research Desk conversations are kept for 1 year after the last message. An administrator can shorten this to any number of days, or to a single session.
- AI memory
- While it is on, HillGenius may remember what each person types into the help bar and Research Desk, so later answers fit them better. Each person’s memory is visible only to them. It is on by default, and an administrator can turn it off.
- Shared recommendations
- While it is on, HillGenius may use your team’s activity with public records, aggregated and de-identified so it identifies no customer, user, client or matter, to recommend public records to other users. It is on by default, and an administrator can turn it off.
- Quality review
- A member of our staff may read a small sample of Research Desk conversations and Ghostwriter memos to check their quality, under a duty of confidentiality. It is on by default, and an administrator can turn it off.
- Ethical walls
- On Enterprise plans, any client can be restricted to named people. No one else in your organization can open it, receive its alerts or see that it exists.
Stored in the United States, encrypted, and backed up daily
- Location
- Customer data is stored in the United States.
- Private by default
- Chats, drafts and documents are visible only to the person who made them unless they share them.
- Organization separation
- Access rules in the database itself keep organizations apart, so one customer’s records cannot be read from another customer’s account.
- Encryption
- Data is encrypted in transit (TLS 1.2 or higher, with HTTPS required on every connection) and at rest. Our database, file storage and backups use AES-256, and backups are encrypted before they leave our systems.
- Backups
- Data is backed up daily, encrypted, and stored in multiple locations, with point-in-time recovery for the last 7 days. Restores are tested annually.
Tested every year, monitored every hour
- Penetration test
- HillGenius undergoes an annual penetration test conducted by Thoropass, a CREST-accredited testing provider. The most recent test was completed in August 2026.
- Monitoring
- Automated security checks run every hour and alert our team immediately.
- Secure development
- Every change passes automated security tests and code review before it ships.
- Self-assessment
- We keep an evidence-backed self-assessment against OWASP ASVS 5.0 Level 1.
- Staff access
- Access to customer data is limited to staff who need it for their role. Staff admin accounts require a second factor, and access through our admin tools is logged.
- Abuse protection
- We use bot protection on signup and rate limits on our APIs.
Security documents
Request security documents- Privacy Policy
- Public
- Data Processing Addendum
- Public
- Sub-processor list
- Public
- System status
- Public
- Penetration test executive summary
- On request, under NDA
- OWASP ASVS Level 1 self-assessment
- On request
Frequently asked questions
Answers follow our Terms of Service, Privacy Policy and DPA, updated October 15, 2026. We keep this page up to date, but if anything here conflicts with those documents, the documents control.
What data does HillGenius store about us?
- Public records
- We hold transcripts of public hearings and events, floor speeches, bills and press releases. Which events you ask us to cover is your information.
- Your content
- Your topics, client lists, uploads, writing samples, memos and chats belong to your organization.
- Account information
- We keep names, work emails, billing records, and the network address and device of each sign-in.
Can HillGenius employees see our data?
In limited cases, and your administrator controls the main one. Your organization settings include a Quality Review setting. While it is on, a member of our staff may read a small sample of Research Desk conversations and Ghostwriter memos to check their quality, under a duty of confidentiality. It is on by default, and your administrator can turn it off at any time.
We also read a memo you report a problem with, if you agree to share it, and messages you send to help or support. We may use the AI tools on our sub-processor list to help review them. Staff may also access data when needed to keep the service secure, investigate abuse, or comply with the law. Access through our admin tools is logged.
Will you notify us if there is a data breach?
Yes. We notify you without undue delay, and within 72 hours of learning of an incident affecting your data.
Will you tell us before adding a sub-processor?
Yes. We notify you at least 10 business days before a new sub-processor starts handling your data. If a provider fails suddenly and we have to replace it, we notify you within 10 business days of the switch.
How long do you keep our data?
- AI Analyst conversations
- 7 days
- Ghostwriter memos
- 7 days from creation
- Research Desk conversations
- 1 year from the last message, or less if an administrator sets it
- Writing samples
- Until you delete them, or until your organization’s data is deleted after your subscription ends
- Account and billing records
- While your account is open, and afterward as long as tax and accounting rules require.
What happens to our data if we cancel?
When your subscription ends, your administrators can download your organization’s data from your account for 30 days. During that time, you may ask us to return or delete it by writing to security@hillgenius.com. If we don’t hear from you, we delete it. Either way, we complete return or deletion within 30 days after that window closes, and backup copies are overwritten as backups rotate.
To report a vulnerability, please reach out to us at security@hillgenius.com.
For a privacy request, please reach out to us at privacy@hillgenius.com.