Security, privacy, and reliability

CadFiles.ai is built to help teams research companies responsibly. Below you’ll find how we protect data, handle payments, and keep the platform reliable.

Security

Core controls that reduce risk across accounts and API usage.

✔ TLS/HTTPS encryption in transit
✔ API key-based authentication
✔ Rate limiting & abuse detection
✔ Audit logs for key billing events

Security questions

Payments

Stripe-backed billing

Payments and invoices are handled through Stripe’s infrastructure.

✔ Card data is processed by Stripe
✔ Receipts & invoices are Stripe-generated
✔ Webhooks used to update credits & plans
✔ Refunds/disputes handled via Stripe flows

Buyer Protection

Reliability

Operational practices designed for stable research and exports.

✔ Health checks & monitoring
✔ Usage caps to prevent overload
✔ Idempotent billing events
✔ Incident response workflow

System status

PSC (Persons with Significant Control)

How we fetch PSC from Companies House, what we show, what we mask, and how protection/suppression is handled.

✔ API fetch on-demand per company
✔ Masked address (no street/premises)
✔ Outward postcode only
✔ Safety-first suppression workflow

PSC: Data, Privacy & Safety

Licensing

Companies House re-use guidance

Licensing, attribution, and how we publish derived datasets (company profiles, exports, and PSC display).

✔ Public task + Crown copyright context
✔ Attribution and source references
✔ Caching and rate-limit handling
✔ Responsible re-publication rules

Companies House Licensing

Data sourcing & accuracy

We aggregate and normalize company information from public registries and licensed datasets when available. Outputs can vary by country and source freshness. Use CadFiles.ai as a research tool, not a sole source of truth.

Contact support View plans

Area	What we do	What you can do
Account security	Protect sessions, keys, and billing state	Rotate API keys; limit key sharing
API usage	Rate limits and credit-based metering	Cache results; batch requests
Payments & invoices	Stripe checkout + Stripe invoices/receipts	Use your Stripe receipt for accounting
Data accuracy	Normalize from upstream sources	Cross-check with official registries
Availability	Monitoring, health checks, and safeguards	Report incidents with timestamps

Privacy principles

We aim to minimize what we store and keep billing/financial details inside Stripe where possible.

✔ Data minimization by design
✔ Credit/plan state stored for service delivery
✔ Avoid storing raw card/bank data (Stripe handles it)
✔ Support requests may reference logs (timestamps/ids)

For legal terms, publish your Privacy Policy and Terms pages and link them here.

Responsible use

Use the platform ethically and within your jurisdiction’s rules for compliance, outreach, and due diligence.

✔ Don’t upload or request sensitive personal data
✔ Respect local regulations on outreach and profiling
✔ Use official filings for final decisions
✔ Report suspicious or abusive usage

Need compliance docs, enterprise terms, or a security review?

Contact sales

UK PSC (Persons with Significant Control) — transparency & safeguards

CadFiles.ai can display PSC entries for UK companies using the Companies House public register (API). We provide this as a research aid and always recommend verifying directly with Companies House for decisions.

✔ Source: Companies House public register / Companies House API.
✔ Minimisation: we mask street/premises and full postcode; we avoid displaying sensitive or non-essential fields (e.g., identity verification metadata).
✔ Indexing: other publishers/search engines may display cached public-register information independently.
✔ Requests: you can request suppression/correction on CadFiles.ai; erasure is not always applicable and may be refused where lawful exceptions apply.
✔ Attribution: Contains public sector information licensed under the Open Government Licence v3.0 (except where otherwise stated). © Crown copyright.

Request PSC suppression / correction Data rights & contact

Tip: If you have a Companies House protection/suppression decision (or a safety-related risk), include it in your request so we can act faster.