Naitra Privacy Policy

Effective date: July 6, 2026

Naitra LLC ("Naitra", "we", "us") is a Wisconsin limited liability company that provides an AI audit execution platform for internal audit teams. This policy explains what information we collect, how we use it, and the choices you have. It covers our website at naitra.ai and the Naitra application.

The two kinds of data we handle

Account and business data. When your organization signs up, we collect the information needed to run your account: names, work email addresses, authentication credentials, organization details, and billing information. Billing is processed by Stripe; Naitra does not store raw card numbers.

Customer audit content. Your organization uploads audit evidence, control matrices, findings, and related material to perform audit work in Naitra. This content belongs to your organization. We process it only to provide the service and never for any other purpose.

How we use information

We use account data to operate, secure, and support the service, to communicate with you about it, and to bill for it. We use customer audit content solely to deliver the product features your organization uses: evidence evaluation, test authoring, findings drafting, and reporting.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use customer audit content to train AI models, and our AI provider is contractually barred from doing so as well.

AI processing

Naitra uses the Anthropic API to process audit content. Data sent for AI processing is not used to train models and is retained by Anthropic for no more than 30 days. Every AI call in Naitra is logged with the organization and user that triggered it.

Who we share data with

We share data only with the service providers required to run Naitra, listed on our subprocessors page at naitra.ai/subprocessors: Anthropic (AI processing), Amazon Web Services (evidence storage and key management), Supabase (authentication and database), Vercel (frontend hosting), Railway (backend hosting), and Stripe (payments). Each processes data only on our instructions. We may also disclose information if required by law, and we will notify you of legal demands where we are permitted to do so.

Security

Customer data is encrypted in transit and at rest. Evidence is stored in immutable storage with integrity hashing, access is role-based with multi-factor authentication available and enforceable, and security-relevant actions are recorded in a tamper-evident audit log. Details are on our security page at naitra.ai/security.

Retention and deletion

Account data is retained while your organization has an active account and for a limited period afterward as required for legal and financial records. Customer audit content is retained according to your organization's configuration and the terms of your agreement; on termination, your organization may export its content, after which it is deleted per the Data Processing Addendum. Note that evidence under an active immutability retention period cannot be altered before that period ends by design.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, including rights under the California Consumer Privacy Act. Because Naitra processes most personal information on behalf of your employer, requests about audit content should go to your organization; we support our customers in fulfilling them. For requests about data Naitra controls directly, contact support@naitra.ai. We will not discriminate against you for exercising your rights.

Cookies

The Naitra application uses cookies strictly necessary for sign-in and session security. Our marketing site does not use advertising or cross-site tracking cookies.

Children

Naitra is a business product and is not directed to anyone under 18.

Changes

If we make material changes to this policy, we will post the updated version at naitra.ai/privacy and update the effective date, and for significant changes we will notify account administrators.

Contact

Naitra LLC, Wisconsin, United States. Questions or requests: support@naitra.ai. Security reports: security@naitra.ai.