Confidential by default

The documents you make with EM+X carry decisions — board readouts, steering materials, investment memos. They are handled accordingly.

Your content is never used to train models

Customer content — templates, briefs, evidence, generated documents — is not used to train models, ours or our AI providers'. Generation runs through commercial model APIs under terms that exclude training on API traffic, and your content stays out of every other customer's world.

Encrypted in transit and at rest

Every connection runs over TLS. Templates, briefs, evidence, and finished documents are encrypted at rest on our storage and database infrastructure.

Private to your account

Every request is authenticated and ownership-checked: your projects and files are reachable by your account and no one else's. Optional two-factor authentication (TOTP) protects sign-in. MCP access uses OAuth 2.1 with audience-bound tokens — an agent you connect can reach only your own projects, and download links are signed, expiring capability URLs that re-verify the file's digest.

Payments never touch us

Card details go directly to Stripe and are never seen or stored by EM+X.

Deletion

Deleting a project deletes its documents and data from the product. Files you have downloaded are standard .pptx/.docx and remain yours regardless.

Infrastructure

EM+X runs on Vercel (web), Render (document engine), Supabase (auth, database, storage), and Stripe (payments), with commercial LLM APIs for generation. Each processes data only as needed to provide the service. Details in the privacy policy.

Security questions or reports: hello@emplusx.com.