Municiprompt
Security and data ownership
A plain-language summary of where city material lives, who can reach it, and what is never done with it.
Written for: Your IT reviewer
The short answers
- Who owns the material?
- The city. Documents you load in and every draft your staff produce remain city property.
- Do you train on our data?
- No — not our models, not anyone else's.
- Is it encrypted?
- AES-256 at rest, TLS 1.2 or better in transit.
- Is our material separated from other cities?
- Yes. Each city's material is isolated from every other tenant.
- Can we get our material out?
- Yes, at any time, with timestamps, in a form you can attach to a response.
- What happens if we leave?
- Export everything, and it is deleted on request. Nothing is held back to force a renewal.
Access
- An administrator controls who has an account and which departments they can reach
- Sessions are held in a cookie the browser cannot read from JavaScript
- Passwords are stored hashed, never in plain text
- Administrative actions are recorded in an audit log the city can review
Retention and public records
Municiprompt does not change your obligations under your state's public records law. What it does is make the material easy to find, export, and dispose of on the schedule you already keep.
Your administrator sets a retention window for drafts and uploaded documents, and can shorten it at any time. Content is deleted automatically when the window closes, and deleted content falls out of backups on the backup rotation rather than being hidden from view and kept.
If your reviewer needs more
A completed security questionnaire, our subprocessor list, and answers to your city's own vendor form are available on request — we would rather complete your form than ask you to accept ours.