# ExactCov

AI covenant monitoring

Research: https://www.safecli.org/company/exactcov.com
Company: https://exactcov.com

## Evidence status

Insufficient enterprise evidence
Source review: 2026-10-16T03:30:14.111Z
API: Unknown

Company-published claims, not independently verified controls. Unknown is not evidence of absence.

## Procurement checks

### Security assurance — Not found


- [ ] Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### SSO & provisioning — Company-published

> UK / EU / US data residency · SSO / SAML · VPC or on-prem deployment

Source: https://exactcov.com/
Reviewed: 2026-10-16T03:30:14.111Z

> - SSO and SAML, custom MSA and DPA, VPC or on-premises deployment on Enterprise.

Source: https://exactcov.com/vault
Reviewed: 2026-10-16T03:30:14.111Z

- [ ] Test SSO enforcement, user removal and privileged-account recovery.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Access controls — Not found


- [ ] Test least-privilege roles and cross-tenant access with separate test accounts.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Auditability — Company-published

> - One audit trail for every miss, breach and waiver, so the report you sign is one you can defend.

Source: https://exactcov.com/
Reviewed: 2026-10-16T03:30:14.111Z

> | Audit logs | Access logs, processing timestamps | 12 months |

Source: https://exactcov.com/zdr-policy
Reviewed: 2026-10-16T03:30:14.111Z

- [ ] Verify administrative and data-access events, retention and export.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Data handling — Mixed claims — review

> - Zero data retention and self-hosted storage options keep client papers off third-party infrastructure.

Source: https://exactcov.com/
Reviewed: 2026-10-16T03:30:14.111Z

> Permissions mirrored, zero data retention.

Source: https://exactcov.com/
Reviewed: 2026-10-16T03:30:14.111Z

> Zero data retention No templates required

Source: https://exactcov.com/
Reviewed: 2026-10-16T03:30:14.111Z

> - Zero data retention: documents are never used to train models and are deleted when you remove them.

Source: https://exactcov.com/vault
Reviewed: 2026-10-16T03:30:14.111Z

- [ ] Review DPA, subprocessors, retention, deletion, residency and AI training use.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Reliability & support — Not found


- [ ] Request SLA, incident history, recovery targets and support escalation terms.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Product effectiveness — Company-published

> ### Benchmarking

Source: https://exactcov.com/
Reviewed: 2026-10-16T03:30:14.111Z

> NAV change against the fund's own benchmark over the same window.

Source: https://exactcov.com/
Reviewed: 2026-10-16T03:30:14.111Z

- [ ] Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

## Decision

- Owner:
- Intended use and data sensitivity:
- Blocking requirements:
- Pilot success criteria:
- Unresolved risks:
- Decision and review date: