How Your Data Is Protected
ReportMax is designed to reduce the amount of identifying information exposed during AI-assisted drafting and to limit how long draft content remains in our systems.
1Identifiers are hidden on your device
Before report content is sent to our AI provider, ReportMax replaces detected names and other direct identifiers with opaque placeholders on the officer’s device. Names use sequential placeholders such as [SUBJECT-1] and [SUBJECT-2]. The replacement map remains in the browser and is used to restore those values after the draft returns.
2Anthropic API data handling
ReportMax sends tokenized drafting content to Anthropic’s Messages API. Anthropic’s standard commercial API policy may retain inputs and outputs for a limited period. ReportMax does not currently make a public Zero Data Retention claim because that setting must be confirmed for the specific Anthropic organization used by the service.
3Drafts expire after 24 hours
ReportMax stores only the tokenized input and tokenized AI output in its draft table. Each record receives a 24-hour expiration time when it is created. A server-side cleanup job runs automatically at startup and every hour to permanently delete expired draft records.
4Database encryption
Replit’s published security documentation states that its PostgreSQL database service encrypts data in transit using TLS and data at rest using AES-256 server-side encryption. ReportMax does not make a public claim about which provider operates the underlying encryption keys or whether customer-managed database encryption keys are available for this service.