Security and privacy for your device documents
← Return to FAQHow does rmForge protect my uploaded documents?
Uploads are stored in secure cloud storage with row-level access controls and signed-URL access. All traffic is HTTPS. Within rmForge, files are accessible only to your account and authorized rmForge personnel on a need-to-know basis. To produce your analysis, AI models read your documents, and an outside service scans each file for viruses (see the next two questions).
Does rmForge share my data with anyone?
We do not sell or rent customer data. To run the service, your documents go to two kinds of outside provider: the AI model providers that read them to draft your analysis, and an outside service (VirusTotal) that scans each file for viruses. Our other sub-processors, such as application hosting, the database and email, are listed in our Privacy Policy.
Where is data stored?
Customer data is hosted in a secure US-region cloud environment. Data is not stored or replicated outside of the US by rmforge.io.
Is rmForge HIPAA compliant?
rmForge is not designed to process Protected Health Information (PHI). Uploaded documents are device design files, not patient records, so a Business Associate Agreement (BAA) is not required for typical use. If your use case involves PHI, contact support@rmforge.io to discuss requirements and support. Do not upload PHI data.
Do you scan uploaded files for malware?
Yes. Each uploaded file up to 32 MB is sent to an outside service (VirusTotal) to be scanned, and a file the scan flags stops the analysis.