Your firm's data stays your firm's
What we do, stated plainly, and the same as our Privacy Policy.
Each firm kept separate
Every record belongs to one firm, and the database enforces it with row-level security. The separation is in the database, not just in the app. Files such as CVs sit in private storage, fenced to the firm that owns them.
Traffic is encrypted
All traffic to our website and service is encrypted (HTTPS).
Not used to train AI, never sold
We do not use our customers' data to train AI models, and we do not sell it.
Every AI output is staged for a person
AI summaries, proposed updates and drafts wait for someone at your firm to accept, edit or send. Nothing is sent without a person's approval.
Access is limited
Access to customer data is limited to the customer that owns it and to the people at Defrag who need it to run and support the service.
Sign-in and access
Sign-in is with Google, limited to the email domains your firm allows. Gmail and Google Calendar access is requested at sign-in, and you can decline either one. Defrag skips what it wasn't granted.
Who we use to run Defrag
A small number of service providers process information to provide their service to us. This is the list in our Privacy Policy.
- Supabase: database, sign-in and file storage, hosted in the United States
- Vercel: website and service hosting
- Google: sign-in, and the Gmail and Google Calendar access granted at sign-in
- Anthropic: AI processing for summaries, suggested updates and drafts
- Voyage AI: search indexing, so records and calls can be searched by meaning
A customer may also connect its own call recording or transcription service. That provider's terms then apply.
See it on your own desk
Thirty minutes with the person who runs Defrag. Bring a search you're working on and we'll walk it through.
Fill in a short form and we'll set up a time.