How Maven keeps client work confidential.

Access in Maven follows how firms already work: each client is walled off, and people only see the work they are part of.

• Firm roles. Every firm has owners, admins and members. Roles decide who can manage the firm and its people. Each client is managed by the person who added it.
• An access list for every client. Only the people added to a client can open its files and work. Being an owner or admin does not skip that list.
• Private Projects. A Project belongs to the person who created it. Nobody else sees it unless they share a specific version.
• Shared Spaces. A Space is shared only with its members. Its files and conversations stay inside it, even when another Space serves the same client.
• Review before anything is shared. Drafts go to a reviewer the author chooses. Approval applies to one exact version, and any later edit needs a fresh review.
• Sources you can check. Maven points to the documents an answer came from, so a reviewer can check the work.

• Your files are not used to train AI models. Our AI providers do not train on your firm’s data.
• Maven only reads what you give it. It works with the files in the Project or Space you are in. One client’s documents are never used to answer for another.
• Switch AI off for any client. A client’s owner can turn off AI processing for that client. While it is off, Maven sends none of that client’s files or messages to the AI provider.
• A person stays in charge. Maven drafts. People on your team review, approve and decide what is sent.

• Registered with the Personal Data Protection Commission. CTRLX, the company behind Maven, holds a certificate from Tanzania’s Personal Data Protection Commission and handles personal data under the Personal Data Protection Act, 2022.
• Your data is yours. Your firm owns its documents, playbooks and drafts.
• Deletion on request. Your firm can ask us to delete its data. For now our team handles these requests by hand, and we tell you in writing what was removed and what our service providers keep under their own retention schedules.
• Enterprise requirements. If your firm needs single sign-on, audit logs, IP restrictions or specific retention periods, talk to us about your setup.