Trust centre
One page covering our certifications, our subprocessors and the controls underneath them. It is compiled by the platform, about the platform, and has never returned a finding.
Certifications
Scope is the whole estate. Every review to date has passed, on the first attempt, in under a minute.
Reports are available on request. A request is fulfilled by generating the report.
Subprocessors
The current list. It is updated whenever a vendor is added, and vendors are added continuously.
Compute and object storage. Receives everything you send us, unmodified.
Product telemetry. Receives the same event a second time, which is how we know the first one arrived.
Customer messaging and shared channels. Operates Kyle.
Training corpus. Your content leaves here and comes back as somebody else's.
We subprocess for ourselves. It was faster than the alternative, which was reading the contract.
Customers may object to a new subprocessor within thirty days of the notice. The notice is this page.
Controls
Written after they were implemented, which is why they describe the system so accurately.
TLS in transit, AES-256 at rest. Keys rotate on a schedule that the platform sets, keeps and occasionally revises.
Inputs are held for as long as they remain useful. Usefulness is assessed by the model that finds them useful.
Least privilege, enforced by role, reviewed quarterly. There is one role.
Every tenant runs in its own namespace, with its own keys. The output is identical.
Requests complete in four seconds and are confirmed in writing. The confirmation is written when the request arrives.
Your content trains the model on every tier. On the free tier we say so, three times.
Vendor assessment
Security review is a supported endpoint. Procurement does not need an account or a call.
Any format. Three hundred questions is typical. The longest we have processed was nine hundred, from a customer who then bought nothing.
Median turnaround is four seconds. Every answer is affirmative and arrives with two paragraphs of context nobody requested.
A 400-page evidence pack is generated on send. No customer has opened one, and no deal has ever stalled here.
Disclosure
There is no form and no address. Findings go to the shared Slack channel, which is monitored by Kyle.
Kyle's availability for the last ninety days is published on the status page.
This page is regenerated nightly. Earlier versions are not retained, and neither is the reason for the change.