Privacy and security

Projects are private by default

Only invited members can see a project. Signing in gives no access to a project you were not invited to, and platform staff do not see inside a private project unless they are members of it.

A suspended member loses access at once, and the record of their earlier work is kept.

What is stored

The platform stores the papers a project found or imported, its files, the values extracted from them, and the decisions people made, each with who made it and when.

Files are stored privately and downloaded through short-lived links. Every consequential action is recorded in the Activity log.

What is sent outside the platform

Two things, and nothing else. Search queries and paper identifiers are sent to literature databases. Text from papers is sent to a suggestion service only if the platform has one switched on.

Credentials for integrations are write-only: a platform owner enters them, and they are never shown again.

Your account

Anyone can create an account with an e-mail address and a password, and the address is confirmed by e-mail. Google sign-in is offered when the platform has it switched on.

Two-factor authentication is available in Account. "Sign out everywhere" ends every session of your account on every device; use it after signing in on a shared computer.

What the platform never holds

The platform never asks for your university password and holds no library sign-in of yours. For a paper behind a paywall, it gives you a link to your library or the publisher, and you upload the PDF you obtained. It never bypasses a paywall and does not route requests through a library proxy.