Trust Center

Security, integrity, and honest disclosure in one place.

How we protect your data, govern our AI, and publish the documents that define our commitments — publicly where we can, and behind our verified Drata Trust Center where confidentiality requires it.

Zero Data Retention — Active
Full Audit Logging — Active
SOC 2 Type II — In Progress
ISO 42001 — In Progress
Drata Trust Center — Coming Soon
Zero Data Retention

Your data never trains a model.

Evolution Global holds enterprise-grade agreements with each of our foundation model providers. Any claim data, adjuster notes, or intake records submitted to the ELIAS AI layer is processed in memory only — never logged, stored, or used to retrain any model.

“Your claims data is never used to train Claude, OpenAI, or Gemini. Our enterprise agreements make that a contractual guarantee — not a preference setting.”

Enterprise agreements on file. Documentation available to enterprise customers upon request under NDA via the Drata Trust Center.

Foundation Model Providers
Anthropic · Claude
Primary Model · Enterprise API
ZDR Active
OpenAI
Backup Model · Enterprise API
ZDR Active
Google · Gemini
Backup Model · Vertex AI Enterprise
ZDR Active

Claude is our primary model. OpenAI and Gemini serve as backup. All three operate under zero data retention at the API layer — transient by contract.

No Model Training

Your claims data is never used to refine, fine-tune, or improve any foundation model — including ours. What you submit belongs to you.

No Residual Logs at LLM Layer

Once ELIAS AI returns a response, no trace of the raw input remains in the model provider’s infrastructure. The AI layer is stateless by contract.

Contractual, Not Optional

This is not a configuration toggle. Our enterprise agreements with Anthropic, OpenAI, and Google bind each provider to these protections as a legal obligation.

No black box. Every decision is traceable.

Every ELIAS AI interaction is fully logged within the Evolution Global platform — from first request to final claim lock. Every action carries three attribution records: who originated it, who executed it, and who is accountable for the result. Nothing is anonymous. Nothing is reversible without a record.

Ark Alliance Attribution Model
Origin
Who or what initiated the action
Executor
The service or user that performed it
Authority
The policy or rule that allowed it

Logged on every action. Immutable. Exportable for audit.

audit_log_2025-06-15.jsonl
01

Four Levels of AI Involvement

Manual, Instructed, Delegated, and Automated. Every ELIAS action is classified by level — and every level is logged with the appropriate authority scope. You and your organization choose how much autonomy ELIAS has. It respects those boundaries absolutely.

02

Three-Part Attribution on Every Action

The Ark Alliance Attribution Model records Origin, Executor, and Authority for every action in the system. Adjusters, carriers, and firms always know exactly what happened, who approved it, and why. No guesswork. No gaps.

03

Flags, Approvals & Human Override

ELIAS flags anything outside pre-approved norms and pauses for review. Every human approval is timestamped and attributed. Overrides are recorded with the adjuster’s identity attached — creating a complete chain of custody on every decision point.

04

CIS Hash Lock & Golden Record

When a session closes, the entire output is hashed against the Ark Alliance Certified Integrity Standard and locked to the claim’s Golden Record. Tamper-evident. SOC 2 CC6 aligned. The audit trail is the record — not a copy of it.

What we've built. What we're building.

Honest disclosure is the foundation of trust. Here is exactly where we are — and where we are going.

Security Commitment
Status
Scope
Zero Data Retention — Foundation Models
Enterprise agreements with Anthropic, OpenAI, and Google prohibit data retention and model training on customer data.
Active
All Products
100% ELIAS AI Audit Logging
Every AI session, model call, output, and human review action is timestamped and logged within the Evolution Global platform.
Active
ELIAS AI
Role-Based Access Control
Least-privilege access model. Every user, API credential, and integration is scoped to exactly the permissions required — nothing more.
Active
All Products
Encryption In Transit & At Rest
TLS 1.2+ for all data in transit. AES-256 or better for permitted storage. No unencrypted paths in the AI request lifecycle.
Active
All Products
Human Review on All AI Outputs
No ELIAS AI recommendation takes autonomous action on a claim. Every output requires licensed adjuster review before affecting a record.
Active
ELIAS AI
SOC 2 Type II Compliance
Formal audit underway via Drata. Controls across CC6, CC7, and CC9 trust service criteria aligned and in active documentation phase.
In Progress
All Products
ISO 42001 AI Governance Certification
AI management system framework underway. Aligning ELIAS AI architecture, logging, and oversight model to ISO 42001 requirements via Drata.
In Progress
ELIAS AI
Ark Alliance CIS — Immutable Output Hashing
Every ELIAS AI-confirmed output will be hashed against the Ark Alliance Certified Integrity Standard and locked to the claim’s Golden Record.
In Progress
ELIAS AI
NIST AI Risk Management Framework
Selective NIST AI RMF controls being mapped to ELIAS AI operational posture as a supplement to ISO 42001 via Drata.
Planned
ELIAS AI

Available without an NDA.

These documents are publicly available — no request required, no account needed. Read them, share them, reference them.

All Products
Acceptable Use Policy

Defines what you may and may not do with Evolution Global services and platforms. Covers intellectual property, system security, privacy, AI usage, and enforcement. Effective October 1, 2023 — revision in progress.

View Document →
All Products
Privacy Policy

How Evolution Global collects, uses, stores, and shares your personal information. Covers GDPR, CCPA, Virginia VCDPA, data retention, and your rights as a data subject. Effective September 1, 2023.

View Document →
FileTrac · FileTrac Evolve
Master Subscription Agreement

The governing contract for FileTrac and FileTrac Evolve subscribers. Covers access rights, data handling, SLAs, billing, confidentiality, liability, and termination. Effective October 1, 2023.

View Document →
Drata Trust Center

Everything else lives behind verified access.

Enterprise customers, audit partners, carriers, and compliance reviewers can request access to our full document vault through the Evolution Global Drata Trust Center. NDA-gated access means your review is documented, verified, and tracked — on both sides.

SOC 2 Type II Report
ISO 42001 Documentation
Data Processing Addendum
Vendor Code of Conduct
Security Architecture
Penetration Test Reports
NIST AI RMF Controls
Subprocessor List
Incident Response Plan

Drata Trust Center URL coming soon. Contact compliance@evolution.global for immediate access requests.

Ark Alliance Foundation
Ark Alliance Foundation

An independent standard for AI integrity in insurance.

The Ark Alliance Foundation is an independent nonprofit — not owned by Evolution Global — established to define and enforce Certified Integrity Standards for AI systems operating in P&C insurance claims. ELIAS AI is built to earn and maintain CIS certification. Our AI commitments are not just contractual. They are externally governed.

Learn About the Ark Alliance →
Golden Record Integrity
Claims data that enters the system must be the same data that exits. No scrubbing, no alteration, no manipulation. CIS enforces this at the output layer.
Transparent AI Decision Paths
Every AI recommendation must be traceable to its inputs, explainable in plain language, and reviewable by the adjuster before it is applied to a claim.
Independent Oversight
The Ark Alliance is structurally independent from Evolution Global — governed by an Advisory Board that includes industry voices outside our organization.
Built for the Long Term
Established under a Texas Purpose Trust structure to ensure the integrity mission survives any change in leadership, ownership, or market conditions.