For your security and legal reviewers
How your data is handled
The short version: read-only access, personal information removed before any AI model reads a conversation, results in open formats you own, and working copies deleted after the readout.
Access
Read-only, through an export or a scoped API token your admin creates and can revoke at any time. Nothing is written back to your systems.
Personal information
Names, email addresses, phone numbers and other personal details are removed from conversation text before any AI model reads it. The labels describe the issue, not the person.
AI models
Models run through a commercial API, in your company's AI account if you have one, or mine if you don't. Either way, the terms bar training on your data, and client data never goes into consumer chat apps. The provider is named in your proposal and data agreement.
Where it lives
Wherever possible, the labeled layer is built in accounts you own, such as your warehouse or a cloud project in your name, and billed to you directly. Everything produced is yours, in open formats.
Retention
Working copies are deleted within 30 days of the readout unless you ask me to keep them, for example to run Ops.
Agreements and reviews
A data processing agreement is part of every engagement, and I'll complete your security questionnaire. I don't claim certifications I don't hold; I'll tell you plainly what is and isn't in place.
Questions: zach@zacharymcgeary.com
Talk it through: 30 minutes, no pitch.
Bring the decision on your desk. You'll leave knowing whether your data can answer it.