Data security

Andoo is a desktop client. Substantive content such as project files, task history and project memory is managed locally on your computer by default.

• When you start a task, Andoo sends the content needed to complete it to the configured AI model.
• The results come back and are saved in your local project. Andoo does not keep your project content.

• Local by default: project files, task records and project memory are stored on your computer by default.
• Processed per task: files or content only enter the relevant processing when you start it.
• Results come back locally: results return to the current project so you can keep checking, editing and keeping a record.

Andoo comes with models suited to legal work that you can use straight away, with no API address or key to configure. If your team has designated providers, private deployment or stricter data handling requirements for AI models, OCR or databases, contact sales to connect your own services.

• Ready by default: for teams that want to get started quickly.
• Bring your own services: configure the AI models or providers your team already uses.
• Private deployment available: for specific requirements on deployment environment or data paths, use an on-premises or private setup.

For the information needed for sign-in, authorisation, billing and task processing, Andoo applies appropriate transmission, retention and access controls to support everyday use and compliance reviews.

• Encrypted in transit: data is transmitted over TLS, reducing the risk of interception or tampering.
• Access control: project access is managed by role, such as administrator, editor and viewer.
• Minimal retention: Andoo's servers keep only what is needed for sign-in, subscription checks and usage statistics, and do not store project content.
• Compliance: data is stored in mainland China, and Andoo sets clear boundaries with its service providers on data transmission, processing and retention.