Security & Data Protection

Aion Automation LTD (trading as Aion) · Contact: contact@immigration.aionautomation.org

Last updated: 8 October 2026

Immigration files hold some of the most sensitive data a person has: passports, immigration history, health and criminal records. This page summarizes how the Aion US service protects that data, for firms and their IT or compliance teams doing due diligence. The binding terms are in our Terms of Service and Data Processing Agreement.

1. Our role

Your firm controls your clients' data. Aion acts as your service provider: we use client data only to prepare the forms you ask for, on your instructions, under the Data Processing Agreement in Schedule 1 of our Terms. We never sell client data, share it for advertising, or use it for any other purpose.

2. How an application flows

• Upload. Documents travel over HTTPS (TLS) into a private, encrypted storage bucket in AWS us-east-1 (N. Virginia). They are never kept on the web server.
• Extract. A single-use, isolated container reads the documents and produces a data summary. The originals are deleted as soon as extraction succeeds.
• Review. Your team checks the summary before any form is drafted.
• Draft. The same container fills in the current official USCIS PDF edition. Any value the AI is not sure of, or could not find, is flagged on the form for your review.
• Delete. The container and its storage are destroyed when the work ends. Remaining files are deleted within 24 hours, and the storage bucket has an automatic 2-day deletion rule as a backstop.

Aion returns an unsigned draft. Signing and filing with USCIS is always done by your firm.

3. Security controls

Encryption

• All traffic is encrypted in transit (HTTPS/TLS, with HSTS).
• Stored job files are encrypted at rest (AWS S3 server-side encryption) and the bucket is private and access-restricted.

Isolation

• Every application runs in its own single-use container. Nothing is shared between applications or firms, and the container is destroyed when it finishes.
• The US service runs no web browser and holds no government-account credentials, so there is no account for it to sign in to or misuse.
• Uploaded documents are treated as data, never as instructions. The AI that reads documents has no tools, and a person reviews its output before any form is drafted.

Access

• Sign-in is by Google, or by a single-use email link that expires after 15 minutes. We store no passwords for your Aion account.
• Session cookies are HttpOnly and Secure. Every application is checked against its owner on every request, so one firm can never open another firm's work.
• Sign-in and job creation are rate-limited. Suspending an account blocks all of its work immediately.

AI provider

• We use Anthropic's Claude through its commercial API. Under those terms Anthropic does not train its models on our data.

4. Where data goes

Provider	What for	Location
Amazon Web Services	Document storage and the isolated per-application containers	US (N. Virginia)
Render	Web application hosting (no client documents stored)	US (Virginia)
Anthropic	AI extraction and form drafting	US
Google	Sign-in (optional)	US
Stripe	Payments (we never see card numbers)	US
Resend	Account emails such as sign-in links (never client data)	US
Crisp	Support chat (no client data unless you type it in)	EU

Each provider is bound by a data processing agreement and may use the data only to provide its service to us.

5. Retention

Data	Kept for
Original documents	Deleted as soon as extraction succeeds (within 24 hours if a run fails)
Extracted summary, drafted PDFs, logs	Deleted automatically within 24 hours, or sooner on request
Hosting backups	Encrypted daily snapshots rotate out after about 7 days
Account and billing records (no client data)	Up to 6 years for accounting

Download your drafted forms within the 24-hour window. After that they are gone for good, from our side too.

6. Risk assessment

We keep a written data protection risk assessment covering this service, revised whenever a provider or the architecture changes. In summary:

Risk	Main mitigations	Residual risk
Unauthorized access to sensitive data	Encryption, isolated single-use containers, 24-hour deletion, per-application access checks	Low
AI error in a draft	Unsure or missing values are flagged on the form; your team reviews every draft; Aion never signs or files	Medium, falling to low with attorney review
Misuse of government accounts	The US service has no government-account access at all	None
Re-identification from usage records	Usage records hold no applicant data	Very low

7. Certifications and questionnaires

Aion does not currently hold a SOC 2 or ISO 27001 certification. We are reviewing both. Our infrastructure providers (AWS, Google, Stripe and Anthropic) hold their own independent certifications, which they publish on their trust pages.

We are happy to complete security questionnaires and to share our full risk assessment with firms on request. Our Data Processing Agreement also gives your firm a right to audit our compliance.

8. Incidents

If we become aware of a breach affecting your firm's data, we will notify you without undue delay so you can meet your own notification duties, and we will help you investigate and respond.

9. Contact

For security questions, questionnaires or to report a vulnerability, email contact@immigration.aionautomation.org.