Trust center
Security, answered before you ask.
What suss. reads, what it never touches, and how we protect it. Written for the person who fills out the security questionnaire.
Request our security overviewArchitecture
suss. reads from your bank, your practice management system and your ledgers, and writes only to its own record. Read-only today: suss. does not initiate payments or transfers. Write-back is a switch the firm turns on, behind the same approval gate.
Data handling
suss. does not train models on client data. Personally identifiable information is stripped before any model sees a document. Firm data is isolated per firm. See How we handle your data for the full policy.
Encryption
Data is encrypted in transit and at rest. Firm data is isolated per customer, so one firm’s matters, payees and balances are not visible to another.
Access and approvals
Role-based access for attorneys, office managers and signatories. Approving money requires a step-up (passkey or device code) for the signatory at the moment of approval.
SOC 2
SOC 2 audit in progress. The report will be available under NDA once it is issued.
Request our security overviewSecurity contact
Found something that worries you? Tell us directly: info@gotsuss.ai. Security reports are reviewed by our leadership team. See also Security.