Project isolation
Each project's plan sets, findings and decisions are stored separately from every other client, in Microsoft Azure (US West).
Security & data
Your project records,
protected and accounted for.
CivilRisk IQ keeps each project's records separate, lets in only the people you name, and records who decided what. Your team signs in with its own Microsoft 365 account and MFA, and your documents never silently train AI.
Microsoft Azure, US West · Microsoft Entra ID sign-in · Named access only
The portal can read
- Reviewer name, email address and user ID
- Sign-in scopes only:
openid,profile,email
Your reviewers can
- See only the projects assigned to them
- View findings and plan sheets
- Record Confirm, Revise or Dismiss with a note
The portal cannot read
- Your mail, files, Teams, SharePoint or calendars
- Your directory or any of your systems
Your reviewers cannot
- See any other firm's or client's projects
- Start analyses or upload files
At a glance How CivilRisk IQ handles your project records
1project per workspace, kept separate from every other client
0new passwords: sign in with your Microsoft 365 account and MFA
3sign-in permissions only: openid, profile and email
5business days to remove guest access after project close, confirmed in writing
Six commitments
Security built into how the review works.
Not a policy added afterwards: the project boundary, the people allowed in and the record of every decision are part of the workflow itself.
Named access only
Only people you name are invited and assigned. Each reviewer sees only the projects assigned to them.
Your sign-in, your policies
Reviewers use their company Microsoft 365 accounts through Microsoft Entra ID. Your MFA and Conditional Access apply, and we never hold their passwords.
Minimal permissions
The portal reads only a reviewer's name, email and user ID. It cannot read mail, files, Teams, SharePoint, calendars or your directory.
Protected in transit and at rest
Connections to the portal use HTTPS, and project records are kept in Microsoft Azure storage, which encrypts stored data.
A record of every decision
Every Confirm, Revise or Dismiss records who made it and when, so the review can be traced and audited later.
Your documents and AI
AI assists the review. It doesn't silently train on your files or make the call.
01
Used for your review
Your documents are read for the review you asked for, within the project boundary agreed at the start.
02
No silent training
Raw client documents never train models silently. Only de-identified, engineer-adjudicated examples are used to improve CivilRisk IQ's review methods.
03
People decide
AI specialists find and organize candidate issues. A licensed engineer (design) or an authorized decision-maker (environmental) decides what is released, and your team decides what changes.
For your IT team
About 20 minutes of setup. Nothing to install.
Sign-in uses standard Microsoft Entra ID B2B collaboration, so your organization keeps control of passwords, MFA and the account lifecycle. Many organizations need only the first and last steps.
- Create a reviewer groupfor the named engineers, so any settings apply only to them.
- Allow B2B collaboration with PrimeLineonly if your outbound settings block it; we provide the tenant and app IDs.
- Allow the invitation emailsfrom invites@microsoft.com, and HTTPS to portal.civilriskiq.com.
- Test with one reviewerwho accepts the invitation, signs in with company MFA and sees only their project.
When the project ends: guest accounts are removed within 5 business days of your request or project close, and we confirm in writing. You can end access at any time.
Questions IT and procurement teams ask
Frequently asked questions
Where are our project records stored?
In Microsoft Azure, in the US West region. Each project’s plan sets, findings and decisions are kept separate from every other client.
Who can see our project?
Only the people you name. Each reviewer is invited individually and assigned to specific projects, and sees only those projects. The CivilRisk IQ team working on your review is the only other group with access.
Are our documents used to train AI?
Your documents are used for your review. Raw client documents never train models silently; only de-identified, engineer-adjudicated examples are used to improve CivilRisk IQ’s review methods.
Do our engineers need new accounts or passwords?
No. Reviewers sign in with their existing company Microsoft 365 accounts through Microsoft Entra ID, under your own MFA and sign-in policies. If your organization doesn’t use Microsoft 365, reviewers can sign in with a one-time email passcode.
What can the portal see in our Microsoft 365?
Only what is needed to sign in: the reviewer’s name, email address and user ID. The portal cannot read mail, files, Teams, SharePoint, calendars or your directory.
What happens when the project ends?
Guest access is removed within 5 business days of your request or project close, and we confirm in writing. You can end access at any time. Retention of project files is agreed in the engagement terms.
Can you meet our IT and procurement requirements?
Exact security and access arrangements are confirmed for each engagement. We provide a step-by-step IT setup guide and walk your IT and procurement teams through their questions before any records are shared.
Bring your requirements
Security questions?
Bring them to the conversation.
Complimentary 20-minute consultation with founder Jason Bennecke; bring your IT or procurement contact. Privacy · Terms
Authorized access, project-scoped storage, and no silent training on your documents. Security & data →
A few short questions. About two minutes.