Trust Center

Security, integrity,
and honest disclosure
in one place.

How we protect your data, govern our AI, and publish the documents that define our commitments — publicly where we can, and behind our verified Drata Trust Center where confidentiality requires it.

Zero Data Retention — Active Full Audit Logging — Active SOC 2 Type II — In Progress ISO 42001 — In Progress Drata Trust Center — Coming Soon

Zero Data Retention

Your data never
trains a model.

Evolution Global holds enterprise-grade agreements with each of our foundation model providers. Any claim data, adjuster notes, or intake records submitted to the ELIAS AI layer is processed in memory only — never logged, stored, or used to retrain any model.

"Your claims data is never used to train Claude, OpenAI, or Gemini. Our enterprise agreements make that a contractual guarantee — not a preference setting."

Enterprise agreements on file. Documentation available to enterprise customers upon request under NDA via the Drata Trust Center.

Foundation Model Providers

Anthropic · Claude
Primary Model · Enterprise API
ZDR Active
OpenAI
Backup Model · Enterprise API
ZDR Active
Google · Gemini
Backup Model · Vertex AI Enterprise
ZDR Active

Claude is our primary model. OpenAI and Gemini serve as backup. All three operate under zero data retention at the API layer — transient by contract.

No Model Training

Your claims data is never used to refine, fine-tune, or improve any foundation model — including ours. What you submit belongs to you.

No Residual Logs at LLM Layer

Once ELIAS AI returns a response, no trace of the raw input remains in the model provider's infrastructure. The AI layer is stateless by contract.

Contractual, Not Optional

This is not a configuration toggle. Our enterprise agreements with Anthropic, OpenAI, and Google bind each provider to these protections as a legal obligation.

Full Audit Logging

No black box.
Every decision is traceable.

Every ELIAS AI interaction is fully logged within the Evolution Global platform — from first request to final claim lock. Every action carries three attribution records: who originated it, who executed it, and who is accountable for the result. Nothing is anonymous. Nothing is reversible without a record.

Ark Alliance Attribution Model

Origin

Who or what initiated the action

Executor

Who or what carried it out

Authority

Who is accountable for the result

Logged on every action. Immutable. Exportable for audit.

elias-audit-log · claim TX-2026-04471 · full lifecycle trace
Level 1 — Manual
origin=adjuster · executor=adjuster · authority=adjuster
09:14:22.104 AUDIT session.start user=adj_9821 [J.Martinez] claim=TX-2026-04471 role=field_adjuster org=IA_FIRM_0041
09:14:22.891 INFO auth.verify sso=evolution_global mfa=true rbac_scope=claims:read,write,ai:instructed
09:14:24.337 AUDIT claim.open type=hail_wind_residential policy=HO-TX-882741 insured="R. Dominguez" loss_date=2026-04-05
Level 2 — Instructed
origin=adjuster · executor=elias_ai · authority=adjuster
09:14:31.002 INFO model.route provider=claude-sonnet-4 fallback=openai latency=144ms zdr=confirmed
09:14:31.887 AUDIT photo.analyze images=14 damage_class=hail severity=moderate confidence=0.94 annotations=attached
09:14:33.441 ATTR attribution.record origin=adj_9821 executor=elias/claude-sonnet-4 authority=adj_9821 action=photo_analysis
09:14:35.119 AUDIT estimate.assist line_items=47 cis_guidance=applied xactimate_sync=pending review=required
09:14:41.772 SYSTEM human.approve adj_9821 reviewed estimate — 3 line items modified — approved:true
Level 3 — Delegated
origin=adjuster · executor=elias_ai · authority=adjuster (pre-approved rules)
09:14:55.003 AUDIT doc.generate type=coverage_summary rule=org_policy#14 auto=true flagged=false
09:14:55.881 TRACE policy.check HO-TX-882741 coverage_a=present deductible=$2500 exclusions=cosmetic_damage:no
09:14:57.204 WARN flag.raised item=roof_age_undocumented threshold=pre-approved adj_9821 notified review=required
Level 4 — Automated + Close
origin=system · executor=elias_ai · authority=org_policy + adjuster
09:15:14.007 AUDIT task.complete xactimate_sync=ok carrier_upload=ok acknowledgment_letter=sent_auto rule=org_policy#08
09:15:14.994 ATTR attribution.record origin=system executor=elias/auto authority=adj_9821+org_policy actions=3 all_within_bounds=true
09:15:16.441 AUDIT session.close duration=54.3s ai_actions=12 human_approvals=4 flags_raised=1 flags_resolved=1 integrity=pass
09:15:16.442 TRACE ark_cis_hash=f9a1e034b82c… golden_record=locked tamper_evident=true soc2_cc6=pass
01

Four Levels of AI Involvement

Manual, Instructed, Delegated, and Automated. Every ELIAS action is classified by level — and every level is logged with the appropriate authority scope. You and your organization choose how much autonomy ELIAS has. It respects those boundaries absolutely.

02

Three-Part Attribution on Every Action

The Ark Alliance Attribution Model records Origin, Executor, and Authority for every action in the system. Adjusters, carriers, and firms always know exactly what happened, who approved it, and why. No guesswork. No gaps.

03

Flags, Approvals & Human Override

ELIAS flags anything outside pre-approved norms and pauses for review. Every human approval is timestamped and attributed. Overrides are recorded with the adjuster's identity attached — creating a complete chain of custody on every decision point.

04

CIS Hash Lock & Golden Record

When a session closes, the entire output is hashed against the Ark Alliance Certified Integrity Standard and locked to the claim's Golden Record. Tamper-evident. SOC 2 CC6 aligned. The audit trail is the record — not a copy of it.

Our Commitments

What we've built.
What we're building.

Honest disclosure is the foundation of trust. Here is exactly where we are — and where we are going.

Security Commitment Status Scope
Zero Data Retention — Foundation Models
Enterprise agreements with Anthropic, OpenAI, and Google prohibit data retention and model training on customer data.
Active
All Products
100% ELIAS AI Audit Logging
Every AI session, model call, output, and human review action is timestamped and logged within the Evolution Global platform.
Active
ELIAS AI
Role-Based Access Control
Least-privilege access model. Every user, API credential, and integration is scoped to exactly the permissions required — nothing more.
Active
All Products
Encryption In Transit & At Rest
TLS 1.2+ for all data in transit. AES-256 or better for permitted storage. No unencrypted paths in the AI request lifecycle.
Active
All Products
Human Review on All AI Outputs
No ELIAS AI recommendation takes autonomous action on a claim. Every output requires licensed adjuster review before affecting a record.
Active
ELIAS AI
SOC 2 Type II Compliance
Formal audit underway via Drata. Controls across CC6, CC7, and CC9 trust service criteria aligned and in active documentation phase.
In Progress
All Products
ISO 42001 AI Governance Certification
AI management system framework underway. Aligning ELIAS AI architecture, logging, and oversight model to ISO 42001 requirements via Drata.
In Progress
ELIAS AI
Ark Alliance CIS — Immutable Output Hashing
Every ELIAS AI-confirmed output will be hashed against the Ark Alliance Certified Integrity Standard and locked to the claim's Golden Record.
In Progress
ELIAS AI
NIST AI Risk Management Framework
Selective NIST AI RMF controls being mapped to ELIAS AI operational posture as a supplement to ISO 42001 via Drata.
Planned
ELIAS AI

Public Documents

Available without
an NDA.

These documents are publicly available — no request required, no account needed. Read them, share them, reference them.

All Products
Acceptable Use Policy

Defines what you may and may not do with Evolution Global services and platforms. Covers intellectual property, system security, privacy, AI usage, and enforcement. Effective October 1, 2023 — revision in progress.

View Document →
All Products
Privacy Policy

How Evolution Global collects, uses, stores, and shares your personal information. Covers GDPR, CCPA, Virginia VCDPA, data retention, and your rights as a data subject. Effective September 1, 2023.

View Document →
FileTrac · FileTrac Evolve
Master Subscription Agreement

The governing contract for FileTrac and FileTrac Evolve subscribers. Covers access rights, data handling, SLAs, billing, confidentiality, liability, and termination. Effective October 1, 2023.

View Document →

Drata Trust Center

Everything else lives
behind verified access.

Enterprise customers, audit partners, carriers, and compliance reviewers can request access to our full document vault through the Evolution Global Drata Trust Center. NDA-gated access means your review is documented, verified, and tracked — on both sides.

SOC 2 Type II Report ISO 42001 Documentation Data Processing Addendum Vendor Code of Conduct Security Architecture Penetration Test Reports NIST AI RMF Controls Subprocessor List Incident Response Plan
Request Access via Drata Trust Center Contact Compliance Team

Drata Trust Center URL coming soon. Contact compliance@evolution.global for immediate access requests.

Ark Alliance Foundation

Ark Alliance Foundation

An independent standard
for AI integrity
in insurance.

The Ark Alliance Foundation is an independent nonprofit — not owned by Evolution Global — established to define and enforce Certified Integrity Standards for AI systems operating in P&C insurance claims. ELIAS AI is built to earn and maintain CIS certification. Our AI commitments are not just contractual. They are externally governed.

Learn About the Ark Alliance →
Golden Record Integrity Claims data that enters the system must be the same data that exits. No scrubbing, no alteration, no manipulation. CIS enforces this at the output layer.
Transparent AI Decision Paths Every AI recommendation must be traceable to its inputs, explainable in plain language, and reviewable by the adjuster before it is applied to a claim.
Independent Oversight The Ark Alliance is structurally independent from Evolution Global — governed by an Advisory Board that includes industry voices outside our organization.
Built for the Long Term Established under a Texas Purpose Trust structure to ensure the integrity mission survives any change in leadership, ownership, or market conditions.