Your data stays yours. Your emails never stay with us.
Trimline reads your invoices and contracts inside a private cloud, keeps only the handful of facts it needs to track a renewal, and discards everything else the moment it's done. If you disconnect, those facts are deleted straight away.
Zero retention
Emails, attachments and PDFs are processed in memory and discarded as soon as processing finishes. They're never written to our databases or disks.
Private cloud
Everything runs in an isolated private network, including the AI models. Your data is never sent to third-party AI services, and it's never used to train models.
Instant deletion
Disconnect a mailbox or close your account, and our access is revoked and your data is deleted from live systems straight away, with no waiting period.
Read, extract, discard.
An email arrives from a vendor, and we pull out the four or five facts that matter. The original is gone before the next one is read.
- vendorAcme CRM
- annual$38,400
- renews2027-02-01
- notice60 days
✕ Original email: not stored
What we keep
- Vendor names and what category of tool they are
- Prices, seat counts and billing cycles
- Renewal dates, notice periods and uplift clauses
- Drafts we've written, only until they're sent or discarded
- An audit log of who approved what, and when
That's the minimum needed to remind you before a deadline and negotiate on your behalf.
What we never keep
- Your emails, including vendor ones, once they've been read
- Attachments, invoices, PDFs or contract files
- Anything personal or internal, which is filtered out before it's read
- Sent negotiation emails, which live in your mailbox rather than ours
- Payment or bank details, which we never ask for
Sealed off from the public internet.
Trimline runs in its own isolated cloud environment. The databases and AI models can't be reached from outside it, and every request that comes in is authenticated and logged.
Isolated network
Application servers, databases and models sit in a private network with no public endpoints. The only way in is through our authenticated API.
AI that stays inside
The models that read documents and draft emails run inside our private cloud. No document or email is ever sent to an outside AI provider.
Encrypted everywhere
TLS 1.2+ in transit and AES-256 at rest, with a separate encryption key for each customer. Mailbox tokens are stored apart from everything else.
No standing staff access
Our team can't open your account by default. If you ask for help, you grant time-limited access, and every action is logged.
Read-only connections
Mailbox and finance connections use the narrowest read-only scopes available. Sending is a separate permission that you switch on yourself.
Full audit trail
Every sync, draft, approval and email sent is recorded with a timestamp and the person who approved it, and you can export the log at any time.
When you leave, so does your data.
- InstantlyAccess revoked
Your mailbox and finance tokens are revoked with the provider, so we can't read anything more.
- InstantlyData deleted
Vendors, contracts, renewals, drafts and the audit log are deleted from every live system.
- Within 7 daysBackups expire
Encrypted backups roll off automatically, and they can never be restored into an account.
- Same dayWritten confirmation
You get an email confirming the deletion, for your own records.
Security questions.
Need a security questionnaire filled in? Email security@trimline.tech.
Can Trimline read all of my email?
No. Messages are filtered by sender and billing patterns before anything is read, and only vendor invoices, receipts, renewal notices and negotiation threads get through. Personal and internal email is skipped and never processed.
If you don't store my emails, how does the negotiation history work?
The emails stay in your own mailbox, which is where they belong. When you open a negotiation in Trimline, the thread is fetched live from your mailbox and shown to you. We keep only the extracted facts, such as offers, dates and prices, plus the audit log.
Is my data used to train AI models?
Never. The models run inside our private cloud, your data isn't sent to outside AI providers, and nothing you connect is used for training.
Where is the data hosted?
In an isolated private cloud environment operated by Trimline. If you need data kept in a specific region, tell us during onboarding and we'll confirm what's available.
How do I report a vulnerability?
Email security@trimline.tech with the details. We reply within two business days, and we won't take action against good-faith research.
Find out what you're overpaying for.
Send us a list of your tools or connect your inbox. Within two business days you'll get every renewal date and notice deadline, plus an estimate of what each contract could save. It's free and you're not committing to anything.