Sécurité | GuidenAIComment GuidenAI protège les données confiées à Broxi AI, Genpio et guidenai.com, et comment signaler une vulnérabilité.Businesses trust GuidenAI with their systems, customers and brand. This page describes how we protect the data entrusted to us and how to report a security issue.Our approachSecurity is part of how we design, build and run Broxi AI, Genpio and guidenai.com rather than a step at the end. We follow the principles of least privilege and defence in depth, and we review our practices as our products and the threats against them change.Infrastructure and encryption

Our services run on established cloud infrastructure providers with their own physical and environmental security controls.

Data travelling between your browser and our services is encrypted using TLS (HTTPS).

We use the encryption-at-rest capabilities of our infrastructure providers for stored data.

Production environments are separated from development and testing environments.

AI models we ownWe train Genpio's avatar and voice models ourselves, own the resulting weights, and serve them on our own inference stack rather than sending that workload to a third-party model API. That keeps control of this processing within GuidenAI.Access control

Access to production systems and customer data is limited to team members who need it for their role, and is reviewed and removed when it is no longer needed.

We require strong authentication, including multi-factor authentication, for access to critical systems.

Secrets and credentials are kept out of source code.

Secure development

Code changes go through peer review before they reach production.

We keep third-party dependencies up to date and act on known vulnerabilities.

We log and monitor our systems to detect and investigate unusual activity.

Our team and vendorsTeam members are bound by confidentiality obligations and are expected to follow our security practices. We choose service providers with care and share with them only the data they need to provide their service.Incident responseIf we become aware of a security incident affecting customer data, we will investigate, act to contain it, and notify affected customers without undue delay and in line with our contractual and legal obligations.Reporting a vulnerabilityWe welcome reports from security researchers. If you believe you have found a vulnerability in guidenai.com, Broxi AI or Genpio, email hi@guidenai.com with "Security" in the subject line. Please include:

A description of the issue and where it occurs.

Steps to reproduce it, with any proof-of-concept code or screenshots.

The potential impact as you understand it.

When researching, please:

Give us reasonable time to fix the issue before you disclose it publicly.

Access only the minimum data needed to show the issue, and do not modify, delete or keep other people's data.

Do not run denial-of-service attacks, social engineering, spam or physical attacks.

Test only against accounts you own or have permission to use.

We will acknowledge your report, keep you updated as we investigate, and credit you if you wish once the issue is resolved. We will not take legal action against researchers who act in good faith and follow these guidelines.Contact usFor security questions, including questionnaires as part of a procurement review, email hi@guidenai.com. Our Privacy Policy at https://guidenai.com/privacy explains how we handle personal information.