Security Overview

Enterprise-Grade Security

Updated: March 3, 2025

GC AI implements comprehensive security measures to protect your data and maintain compliance with industry standards:

End-to-end encryption using AES-256 at rest and TLS 1.2+ in transit
Private database instances through Neon ensuring complete data isolation
SOC-2 compliant vendors for all data processing and storage operations
SOC 2 Type I certification (report available upon request with NDA)
Type II certification currently in progress
US-based infrastructure with all servers located exclusively in the United States

This security architecture matches the standards set by leading enterprise cloud providers like Google Cloud.

GC AI partners with industry-leading LLM providers, each with strict data handling policies:

OpenAI: Implements zero-data retention policy with no training on API data (source)
Anthropic: Maintains zero-data retention agreement and no training on API data (source)
Google: Provides dedicated Gemini API service with no training on customer data (source)
Cohere: Opted out of training on customer data (source)

All our LLM providers are contractually bound to maintain data privacy and security standards that match or exceed industry requirements.