Lodol Gov handles the records and systems your office is responsible for, so it is built to be controlled and checked. This page describes what it does. For a security questionnaire or to review our policies, contact us.
Who can get in
- Single sign-on with Microsoft Entra ID, Okta or any SAML or OpenID Connect provider, and user provisioning and removal through SCIM.
- Two-factor sign-in, which administrators can require for everyone.
- Sign-in restricted to your agency's network addresses, if you want it.
- Roles that decide who can build, run or only view workflows, and access set folder by folder.
- Accounts are created only by your administrators. There is no public sign-up.
What happened, and who approved it
- Approval steps pause a workflow until the right person signs off, and a person can be kept from approving their own request.
- Every run is recorded step by step: what it did, with which values, and when.
- Every change to a workflow is saved as a version you can compare and restore.
- An audit log records who did what in your workspace, kept as long as your run history and never less than two years, and can be sent to your own log system as it happens.
- Records are deleted only on the schedule your agency sets, and each deletion is recorded in the audit log. A deleted workflow's versions are kept as long as its runs.
- A legal hold keeps everything in a workspace, or in the workflows you choose, from being deleted by anyone until your agency lifts it, whatever its retention settings say.
- While a public records request is open, the records request workflows put it on legal hold themselves, and lift the hold once it is released or closed.
Where your data is kept
- Your workspace, workflows, run history and files are stored in the United States.
- Data is encrypted in transit and at rest.
- The credentials for the systems you connect are kept by Google Secret Manager, which may replicate them outside the United States. You can keep them in your own secret store instead.
- The companies that help us run Lodol Gov are listed on our subprocessors page.
How AI is used
- Your staff can build workflows with an AI assistant your agency already uses, connected by signing in. Administrators choose which AI apps may connect, and each one can do only what the person who connected it can. The workflows themselves run as fixed steps you can read before they run, so the same input always takes the same path.
- A workflow uses an AI model only where someone added an AI step, and only through your agency's own account with Anthropic, OpenAI or Google. We don't run AI on your data with our own accounts.
- Your data is never used to train AI models.
Run it on your own servers
Lodol Gov can be installed on your agency's own infrastructure instead of our cloud. Your data, credentials and documents then stay on machines you control.
Your records
What your agency keeps in Lodol Gov stays your agency's record. You can export it at any time, including to answer a public records request or meet a litigation hold. It is deleted when your agreement ends and you've taken what you need, unless a legal hold is still in place.
Report a vulnerability
If you believe you've found a security problem, email vulnerability@lodol.com. We'll confirm we received it and keep you informed while we fix it.