Your project data
stays yours.
Commercial correspondence is some of the most sensitive material on a project. Here is exactly where it goes, who can see it, and what Astruct will and will not do with it.
Stored in Australia
Your projects, mail, documents and drafts are stored in Australia, in Sydney.
Data is encrypted in transit and at rest.
Models run by OpenAI, in the United States
Astruct uses OpenAI’s API to read contracts, mail and documents, answer questions and prepare drafts. Model requests are processed by OpenAI in the United States, under its business API terms.
No training on your data
Under those terms, your contracts, mail, documents and drafts are not used to train models, by us or by OpenAI.
Mailbox access set by your admin
Each person can connect their own Outlook mailbox. Shared mailboxes are connected with your Microsoft 365 administrator’s consent, given once for your organisation.
Your admin decides, one user at a time, whose mailbox each person may search and use with Astruct.
Nothing leaves without a person
Astruct prepares notices and correspondence for review. No letter or email leaves until a person on your team presses Send.
Deadlines you can check
Every deadline shows the clause text it came from and how it was counted, and stays marked “check the clause” until your team confirms the rule. Every piece of evidence is a verbatim quote that opens its source.
You can switch it off
Disconnect a mailbox from Settings at any time. Your Microsoft 365 admin can also revoke Astruct’s consent in Microsoft Entra.
To have your organisation’s data deleted at the end of a trial or subscription, email info@astruct.io.
Who processes your data
Supabase (database and file storage, Sydney). Vercel (application hosting, partly in the United States). OpenAI (model processing, United States). Stripe (billing). Microsoft, and Google or Procore where you ask us to connect them, only for the accounts you connect.
Reporting a concern
If you think you have found a security issue, email info@astruct.io. We reply to every report.
Read the privacy policy for how we handle personal information.