Data Governance & Privacy

Grantium.ai is built as secure research infrastructure, not a startup tool. We treat your unpublished research, grant drafts, and intellectual property with the same level of protection as clinical data.

• All data stored on Canadian servers (Montreal)
• No data transfer outside Canada without explicit consent
• Compliant with PIPEDA (Personal Information Protection and Electronic Documents Act)
• Canadian incorporation: SoftSim Technologies Inc., Montreal QC

• Your research data is NEVER used to train AI models
• AI processing uses ephemeral sessions -- prompts are not stored by AI providers
• You control which sections are sent to AI (opt-in per section)
• AI providers: OpenAI, Anthropic (Claude), Google (Gemini) -- all with enterprise data processing agreements
• Option to disable AI features entirely

• End-to-end encryption for data in transit (TLS 1.3)
• AES-256 encryption for data at rest
• Field-level encryption for sensitive content (unpublished research, grant drafts)
• Separation of identity, content, and AI processing layers
• Regular security audits and penetration testing

• Role-based access: Viewer, Commenter, Editor, Admin
• Workspace isolation -- your data is not visible to other researchers
• Collaborator permissions with granular controls
• Full audit trail of all access and modifications

• Institutional Security Review Package available on request
• Data Processing Agreement (DPA) available for institutional procurement

• Export all your data at any time (JSON, PDF, XML)
• Delete your account and all data permanently
• Request a copy of all data we hold about you
• Opt out of any feature without losing access