Enterprise-Grade Security
Updated: May 29, 2025 GC AI implements comprehensive security measures to protect your data and maintain compliance with industry standards:- End-to-end encryption using AES-256 at rest and TLS 1.2+ in transit
- Private database instances through Neon ensuring complete data isolation
- SOC-2 compliant vendors for all data processing and storage operations
- SOC-2 Type II certification (report available upon request with NDA)
- US-based infrastructure with all servers located exclusively in the United States
LLM Provider Security
GC AI partners with industry-leading LLM providers, each with strict data handling policies:- OpenAI: Implements zero-data retention policy with no training on API data (source)
- Anthropic: Maintains zero-data retention agreement and no training on API data (source)
- Google: Provides dedicated Gemini API service with no training on customer data (source)
- Cohere: Opted out of training on customer data (source)
All our LLM providers are contractually bound to maintain data privacy and
security standards that match or exceed industry requirements.