Trust and security
You know where your data lives. And what the AI sees of it.
Handing tasks to an AI agent means handing it conversations with your customers and candidates. Here is exactly how we protect them.
Data
Where it is, and what the AI sees.
Where your data is
During our launch phase, the console and conversations are hosted by GoDaddy in the United States. Moving them to a data centre in Canada is planned. The AI model receives no personal information.
Processing by the AI model
The AI model that understands and writes the messages is operated in the United States. It does not receive personal information: only the information needed to process the request is sent to it, with no name, contact details or identifier.
No training on your data
Your conversations are not used to train our providers' AI models.
Limited retention
Data is kept for [retention period], then deleted. You can ask for it to be deleted before then.
Québec's Law 25
Compliance with the Act respecting the protection of personal information.
Yenilik is operated by 2AF Inc., a Québec company subject to Québec's Law 25.
Designated person in charge
Person in charge of the protection of personal information: Florent Assaré. To reach them: info@yenilik.ai.
Assessment before any transfer
Before any personal information is communicated outside Québec, a privacy impact assessment is carried out, as required by law. [To be confirmed: assessment completed for hosting with GoDaddy in the United States]
Your rights
Access, correction, withdrawal of consent and deletion: write to us, and we will respond within the time limits set by law.
Register of subcontractors
| Subcontractor | Role | Location | Personal information received |
|---|---|---|---|
| GoDaddy | Hosting of data and the console | United States | Yes, encrypted |
| [AI model provider] | Understanding and writing messages | United States | No |
| Meta (WhatsApp Business) | Messaging channel | [to be confirmed] | Number and messages, under WhatsApp's terms |
Security
A framework based on the ISO/IEC 27001 standard.
The 2AF Inc. team includes a certified ISO/IEC 27001 Lead Implementer. Their practices govern how Yenilik is operated.
Encryption
At rest and in transit.
Segregation
Each customer's data is isolated.
Limited access
Only the people who need access have it, with two-factor authentication.
Audit log
Every action by an agent is recorded and can be reviewed.
Responsible AI
Our rules for every agent.
Transparency
Every agent identifies itself as an AI. No one thinks they are talking to a human.
A human available
A customer can always ask to speak to someone on your team.
Nothing made up
An agent that doesn't know the answer says so, instead of making one up.
Human approval
Actions that commit the business wait for your approval, according to your settings.