Trust Center
Overview
Ask-AI is accessible to your employees via a browser based AI-Assistant that supports them in every software tool they use. The platform extends to your customers through a powerful Help Center product and rich set of RAG APIs that improve self-service and access to knowledge.
Companies including monday.com, Rapid7, Personio, and Snyk are investing in Ask-AI as the foundation to delivering world-class employee and customer experiences.
Compliance
Indexing Controls
Filter and restrict granular data directly at every source - down to individual fields. Ask-AI doesn’t touch the rest.
Automatic PII Redaction
Leading AI models automatically redact your Personally Identifiable Information (PII) from a number of data sources whenever possible.
Logical Separation
Your data is logically separated into a dedicated tenant within Ask-AI. No tenant’s data ever becomes accessible to another customer.
User Authentication & Permissions
All users are required to authenticate access to Ask-AI via existing SSO solutions. Ask-AI can also match existing access controls for most user permissions in your tech stack.
Secure Cloud Environment
All processing of data is completed in Ask-AI’s secure cloud environment. No customer data is ever shared with any third party vendor or used to train any LLM models.
Secure Encryption At Every Step
All data is encrypted using industry-leading standards - in transit at TLS 1.2/1.3 and at rest in AES 256-bit encryption.
Best-in-class monitoring
Software Security
Code Review Processes
Employee Disclosure Processes
Firewalls
Quarterly Vulnerability Scans
Regular Penetration Tests
Responsible Disclosure (Bug Bounty)
Vulnerability Management
Data Security
Daily Database Backups
Encryption at REST
Security Policy
SSL/TLS Enforced
System Access Control Policy
Product and User Security
Hard-Disk Encryption
MFA on Accounts
Session Lock
Terms of Service
Network Security
Denial of Public SSH
Firewalls
Logging/Monitoring
Malware Detection Software
Unique Accounts Used
Infrastructure Security
Automatic Security Patches
Enterprise-Grade Cloud Data Storage
Multiple Availability Zones
Password Policy
Organization Security
Acceptable Use Policy
Code of Conduct
Disaster Recovery Plan
Incident Response Plan
Incident Response Team
Security Training
