Security FAQ
Quick answers to the questions we hear most from security teams.
Is my data encrypted?
Yes — data is encrypted in transit (TLS 1.2+) and at rest.
Do you train AI models on our data?
No. We do not use customer content to train models, and our AI sub-processors are contractually bound to no-training terms.
Where is data hosted?
Primarily in the United States, on Google Cloud and Vercel. See our sub-processor list for details.
Are you SOC 2 compliant?
A SOC 2 Type II audit is in progress. The report will be available under NDA once complete.
How do I report a security issue?
Email security@besavvier.com or see our Vulnerability Disclosure Policy for scope and safe-harbor terms.
How do I get your security documentation?
The DPA and sub-processor list are public. The SOC 2 report and penetration-test summary are available on request under NDA — contact security@besavvier.com.