What types of documents can I generate?

ConsultSuite Pro supports 20+ consulting document types including proposals, inception reports, final reports, policy briefs, concept notes, terms of reference, pitch decks, and more.

How does the AI proposal generator for consultants work?

Choose a document type, fill in a brief, pick tone and length, and the AI generates a polished draft in under 60 seconds. Refine, apply branding, and export to DOCX, PDF, or PPTX.

How does the legal document review work?

Upload any contract, NDA, or agreement. The AI analyzes every clause, assigns a risk score, flags problematic language, identifies missing standard clauses, and suggests alternative wording.

Can I use my own branding on documents?

Yes. Set up your Brand Kit with your logo, colors, fonts, and company details. Every document you export automatically applies your branding.

All data is encrypted at rest and in transit. You retain full ownership of everything you create. We do not use your documents to train AI models.

Is there a free trial?

Yes. Every plan includes a 14-day free trial with full access to all features. No credit card required.

Who at ConsultSuite Pro can access my content?

By default, no one. Customer content is protected by row-level security and is not visible to our team. A small, named group of engineers may access production data only when you grant explicit support consent (for example, to debug an issue you've reported). All such access is logged.

Is my data ever shared with third parties?

We share data only with the sub-processors required to run the service — our cloud host, database provider, AI model gateways, payment processor, and email provider — under data processing agreements. We never sell your data, share it for advertising, or license it for AI training. A current sub-processor list is available on request.

Can I share documents with clients or teammates securely?

Yes. Documents can be exported as branded DOCX, PDF, or PPTX, or shared via expiring links you control. You decide who sees what, and access can be revoked at any time.

Do you support SSO, MFA, and role-based access?

Multi-factor authentication is available on all plans. SAML SSO and role-based permissions for teams are available on Professional and above.

Where is my data hosted?

Data is hosted in managed cloud regions in the EU and US, depending on your workspace configuration. Enterprise customers can request a specific region.

How will I be notified of a security incident?

If we identify a security incident that affects your account or data, we will notify the account owner by email without undue delay — and in any case within 72 hours of confirmation, in line with GDPR. The notification includes what happened, what data was involved, what we are doing, and what (if anything) you should do.

What happens to my data if I cancel?

You can export your full account before cancelling. After cancellation, your content is retained for 30 days in case you reactivate, then permanently deleted from primary systems and rotated out of encrypted backups within the next backup cycle.

Can I get a DPA, sub-processor list, or security questionnaire response?

Yes. We provide a Data Processing Agreement, current sub-processor list, and responses to standard security questionnaires (SIG Lite, CAIQ) on request. Contact security@consultsuitepro.com.

Security & Trust

Built for the data standards your clients expect

Consultants working with governments, multilaterals, and enterprise clients can't compromise on data protection. Here is exactly how we protect your work.

Encryption in transit & at rest

All traffic is served over TLS 1.2+. Documents, client records, and account data are encrypted at rest using AES-256 on managed infrastructure (Supabase / AWS).

Isolated, row-level secured data

Every table that holds customer content is protected by row-level security. You can only ever read or write data that belongs to your account — enforced at the database layer, not just in the app.

Your work is never used to train AI

We use enterprise AI gateways (OpenAI and Google via Lovable AI Gateway) under terms that prohibit training on customer inputs or outputs. Your proposals, contracts, and client data are never used to improve a third-party model.

You own your content

Everything you create in ConsultSuite Pro — documents, contracts, client records, branded exports — belongs to you. You can export it at any time, and we will delete it on request.

Our AI training stance

ConsultSuite Pro uses large language models from OpenAI and Google, accessed through enterprise gateways under data processing terms that prohibit using customer inputs or outputs to train, fine-tune, or improve any third-party model.

We do not train models on your content. We do not sell, share, or license your content to model providers, data brokers, or any third party for AI training purposes. Your client briefs, proposals, contracts, and reports stay yours.

Operational metadata (request timestamps, model used, token counts) is logged for abuse prevention, billing, and reliability — never the content of your prompts beyond a short retention window.

Data retention

Active account data

Retained for the life of your account.

Deleted documents

Soft-deleted for 30 days, then permanently purged.

Closed accounts

All customer content deleted within 30 days of account closure.

Backups

Encrypted backups rotated on a 30-day cycle.

AI prompt logs

Operational logs retained up to 30 days for abuse prevention, then deleted. Never used for training.

Billing records

Retained as required by tax and accounting law (typically 7 years).

You own your content

You retain full intellectual property rights to every document, contract, client record, and deliverable you create or upload to ConsultSuite Pro. We act as a processor of that data on your behalf, not an owner of it.

Export your documents at any time as DOCX, PDF, or PPTX with your branding intact.
Request a full data export of your account in a machine-readable format.
Delete individual documents or your entire account — purges complete within 30 days.
We will never use your content as marketing material, sample data, or training input without explicit written consent.

Compliance & controls

SOC 2 Type II

In progress

GDPR-aligned

Data subject rights supported

EU & US hosting

Managed cloud regions

SSO & MFA

On Professional and above

Some certifications are in progress as we mature. We publish status changes on this page and in our changelog. For procurement reviews, security questionnaires, or DPAs, contact us below.

Reporting a security issue

If you believe you've found a security vulnerability, please report it responsibly to security@consultsuitepro.com. We acknowledge reports within two business days and will keep you updated through resolution.

Please do not publicly disclose issues before we've had a chance to investigate and remediate.

Security FAQ

Quick answers to the questions we hear most often from procurement and InfoSec teams.

Need a DPA or security questionnaire?

We support procurement and InfoSec reviews for firms working with regulated clients.