PRIVACY & SECURITY
AI Trust Center
Create and manage secure AI experiences for your web and mobile platforms
Our commitment to security, privacy, and ethical AI practices
ai12z works with organizations of all sizes across diverse industries and use cases. We are committed to fostering trust through privacy, reliability, transparency, and ethics so our users confidently integrate AI into their web and mobile platforms.
Security & privacy
At ai12z, we prioritize the security and privacy of your data with enterprise-grade protection and compliance measures.
Data encryption
All data, both in transit and at rest, is secured using industry-standard encryption protocols.
Access controls
We provide role-based permissions, allowing only authorized personnel to interact with sensitive data and manage AI configurations.
Compliance standards
We adhere to leading global data regulations such as HIPAA, GDPR, PCI DSS, and CCPA, ensuring alignment with the latest privacy standards.
Reliability & accuracy
We ensure every interaction is dependable and delivers precise responses that enhance user experience and decision-making.
Extensive testing
Our system undergoes rigorous testing with a QA Test copilot framework we’ve developed to assess the consistency and accuracy of experience before deployment.
Data validation
We implement advanced data integrity checks to ensure only high-quality, relevant data is processed by the copilot.
Continuous learning
Organizations can review user feedback and analytics, helping them to refine responses and address content gaps proactively.
Transparency & user control
We provide robust tools to help organizations understand, guide, and refine how the system operates.
Explainable AI
We provide clear explanations for how AI generates recommendations and decisions, enabling users to understand the reasoning behind responses.
Instructing how your digital assistant should behave
Administrators can define the rules, tone, and behavioral constraints for AI interactions through the copilot’s system prompt, ensuring alignment with organizational policies and user expectations.
Prevent AI hallucinations
ai12z uses retrieval-augmented generation (RAG) to ground responses in verified, organization-specific data. This approach ensures AI delivers fact-based answers rather than generating false or misleading information from its training data.
Ethical AI & responsible use
ai12z has established a comprehensive AI governance framework that ensures adherence to ethical guidelines and regulatory requirements.
Bias mitigation
The copilot relies on company-approved data sources, minimizing misinformation risks and ensuring responses remain aligned with organizational values and factual accuracy.
Fairness and inclusivity
Engineered for diverse industries and user demographics, ai12z upholds ethical integrity, using only data from your own approved content, not the LLM.
User consent
Our system provides users with clear options to opt in or out of AI-driven experiences.
Get found in AI and deliver personalized web experiences.
we are here to help
Frequently Asked Questions
Find the answers you are looking for by browsing through a number of questions we get asked a lot.
Where is customer data stored and processed?
Customer data is stored in AWS data centers based on customer geography:
- United States: AWS US East
- Europe: AWS Ireland
- Asia: AWS Singapore
All customer data stored in these environments is encrypted. If your organization has specific data residency requirements or requires a different AWS data location, contact us to discuss available options.
Does ai12z support single sign-on (SSO)?
Yes, ai12z supports Single Sign-On (SSO). It allows your users to sign in using your organization's existing identity provider (IdP) such as Microsoft Entra ID (Azure AD), Okta, or Google Workspace. SSO setup is handled by the ai12z support team in collaboration with your IT/admin team, and it requires a Business subscription or higher along with the ai12z branding package.
Is ai12z HIPAA compliant?
Yes, ai12z is HIPAA compliant. The platform is designed for healthcare organizations with a focus on security, compliance, and customization. It supports secure integrations with healthcare systems, including EHRs via FHIR APIs, while maintaining patient privacy and adhering to HIPAA and SOC 2 requirements.
How is data encrypted?
In ai12z, all data is encrypted both in transit and at rest using industry-standard cryptographic controls. This ensures that sensitive information is securely protected during transmission and while stored. The platform employs robust encryption protocols to maintain data confidentiality and integrity, safeguarding customer data from unauthorized access.
For more details on ai12z's encryption and security measures, you can refer to the Privacy and Security documentation.
Does ai12z undergo independent security testing?
Yes, ai12z conducts regular vulnerability scanning and security penetration testing to identify and mitigate potential threats. These independent security assessments help ensure the platform's integrity and protect against vulnerabilities. Additionally, ai12z follows industry standards such as NIST SP 800-61 for vulnerability management and applies security-by-design principles throughout development to maintain a secure environment.
How does ai12z protect customer data?
How does ai12z keep AI responses accurate and secure?
ai12z grounds AI responses in approved content and data sources and follows the guidelines and boundaries defined by your organization. System prompts, content filtering, and behavioral controls help keep responses relevant and prevent inappropriate or unintended interactions.
The platform also validates data quality and integrity and provides analytics and feedback tools that teams can use to monitor responses and make improvements over time. Audit trails provide additional visibility into AI activity and help support governance and compliance requirements.
Does ai12z use customer data to train AI models?
No, ai12z does not use customer data to train, fine-tune, or improve AI models. Customer questions, answers, uploaded files, and related usage data remain customer data and are not used to train shared foundation models or third-party model providers. This ensures that your data is kept private and secure, used only to deliver the service and support configured product features as per your instructions. Additionally, subprocessors are required not to use customer content for training purposes without explicit authorization.
What access controls does ai12z support?
ai12z enforces access control through well-defined roles that specify a user's privileges and actions within the system. This role-based access control ensures that only authorized personnel can view or modify sensitive data, maintaining confidentiality and compliance with organizational or regulatory requirements. By clearly delineating responsibilities and preventing unauthorized access, ai12z creates a secure and transparent environment for managing AI-powered digital experiences.