Security & Data Practices
Clear boundaries for client material and AI-assisted work.
This page states current public commitments. Engagement-specific providers, access conditions, uses, retention, deletion, and legal terms are confirmed in the written agreement before client work begins.
The public website does not accept client files or participant records.
Data boundaries
Prova works only from materials deliberately shared and agreed for the engagement.
The engagement defines the question, the materials that may be used, what must be excluded, and the allowed uses before the work begins. The workflow does not independently crawl operational systems.
How materials move
The allowed use, review point, and retention decision stay visible through the work.
Current public data-flow commitments
Materials inAgreed files are shared
01Deliberate access
Prova works only from materials the client agrees to share. The workflow does not independently enter operational systems.
While work runsWhat may happen to them
02No AI model training
Prova does not use client materials to train any AI model. Prova also uses only AI vendors that commit to zero data retention (ZDR) and no model training.
03Source-connected analysis
Material statements can be taken back to the source behind them so review and correction remain possible.
Before anything leavesThe review gate
04Human review
A named Prova professional considers context, uncertainty, and contrary material and remains responsible for client-facing work.
Findings outWho may see them
05Client control
Files or findings are shared outside the engagement only under the agreed authorization or another stated legal basis.
When work endsWhat is kept or deleted
06Defined retention
The written agreement states what is retained, what is deleted, when access ends, and which limited exceptions apply.
AI providers
Client materials are not used to train AI models.
Prova uses AI vendors that commit to zero data retention and no model training. The written agreement identifies how AI may assist in the engagement.
Access, use, and review
The engagement agreement controls who may access materials and what may be shared.
A Prova professional reviews client-facing conclusions and remains responsible for them. Client materials and findings are not shared outside the engagement except under agreed authorization or another stated legal basis.
Retention and deletion
The written agreement defines what is retained, what is deleted, and when access ends.
Any limited legal or operational exceptions must be stated in the agreement. This page does not claim controls that have not been verified for a specific engagement.
Public website
Website inquiry data follows a separate, published privacy notice.
The privacy notice identifies the public-site service providers, the information collected through Start, the applicable retention periods, and how to ask about personal information Prova holds through the site.
Procurement
Ask Prova to review your security or data requirements before materials are shared.
Questions about a proposed engagement, provider requirements, retention, deletion, or procurement review can be sent to hello@byprova.com. A request does not create a client relationship or authorize the transfer of files.
A practical first step
Discuss the decision before discussing the data room.
A first conversation can clarify the question and whether Prova is a fit. Client materials are shared only after the applicable boundaries are agreed in writing.
Discuss an engagement