1. Scope
This policy explains how Meridian stores, secures, retains, and deletes the data you and your clients put into the platform - Polaris, Aurora, the Meridian Bar, and the automatic form filler.
2. What we store
Client and case records, uploaded documents, messages, form data and generated forms, calendar and booking data, and operational metadata and logs.
3. Canadian data residency
Customer Data is stored in Canada on enterprise-grade cloud infrastructure. We do not move Customer Data outside Canada except where strictly necessary for a feature you use, with appropriate safeguards (for example, Standard Contractual Clauses). Sub-processors are disclosed by category; specific identities are available under NDA via [email protected].
4. Encryption
Data is encrypted in transit (TLS 1.3) and at rest (AES-256), with per-tenant isolation so one firm can never access another firm's data.
5. Storage allowances
Each plan includes a storage allowance (see the Pricing Terms). Documents, tenant backups, and attachments count toward it. Additional storage is available as an add-on, and we may notify you as you approach the limit.
6. Retention
Customer Data is kept for the life of your subscription plus a 30-day grace period after termination (for export or recovery), then deleted from production and purged from backups on the normal cycle. Billing records are kept for approximately seven years (legal and tax requirements); support records for approximately two years; security and audit logs for approximately twelve months. These periods match the Privacy Policy and the Data Processing Addendum.
7. Backups & recovery
Encrypted backups run on a regular cycle with 30-day recovery. Backups are access-controlled and used only to restore service.
8. Export & deletion
You own your data and can export or request deletion at any time (see Account Deletion).
9. No model training
Stored Customer Data is never used to train any third-party AI model. Meridian AI operates only within your tenant to deliver the features you use.
10. Your responsibilities
Do not store content prohibited by the Acceptable Use Policy; you are responsible for the accuracy and lawfulness of what you upload.