What you upload
Certificates of Analysis, chemical identity files, sequence files, intake answers, and related business context needed to prepare a diagnostic or dossier project. Do not upload materials you lack rights to share. Mark trade-secret or FOIA-sensitive material clearly in intake.
Where it lives
Files are stored in a private Cloudflare R2 bucket bound to the Trellis Pages project. Project metadata and review state live in Cloudflare D1. Session tokens use HttpOnly cookies.
Who can open it
- The client user on the engagement
- The assigned expert reviewer
- Trellis admin for quality release and support
While you use it
Your engagement work stays with your engagement. You receive the delivered package (dossier, slides, audio, transcript as applicable) through the client portal.
When the engagement ends
Access for revisions follows the product terms (including any included RFI revision rounds). Under the Client MSA (v2 draft), Client Materials and Deliverables are retained in the client portal for about 24 months after delivery (or longer while a subscription is active), subject to counsel-finalized retention terms and deletion requests in that Agreement.
If you want it gone sooner
Email [email protected]. We will export what we reasonably can and delete working copies within 30 days, except invoices, acknowledgments, and other records the law requires us to keep.
What we keep for our records
Order, invoice, payment, and tax records required for accounting and law — not a second copy of your laboratory science beyond those retention windows.
Institutional data processing agreement
If your institution needs a signed DPA, email [email protected]. We will work from a standard outline covering parties and roles, scope and term, data categories, confidentiality and security duties, breach notice within 72 hours, sub-processors (Cloudflare, Stripe, email, Wise), international transfers, return/export and deletion, and liability aligned to the order form.