1.Our approach

Security is part of how we design, build and run Broxi AI, Genpio and guidenai.com rather than a step at the end. We follow the principles of least privilege and defence in depth, and we review our practices as our products and the threats against them change.

2.Infrastructure and encryption

• Our services run on established cloud infrastructure providers with their own physical and environmental security controls.
• Data travelling between your browser and our services is encrypted using TLS (HTTPS).
• We use the encryption-at-rest capabilities of our infrastructure providers for stored data.
• Production environments are separated from development and testing environments.

3.AI models we own

We train Genpio's avatar and voice models ourselves, own the resulting weights, and serve them on our own inference stack rather than sending that workload to a third-party model API. That keeps control of this processing within GuidenAI.

4.Access control

• Access to production systems and customer data is limited to team members who need it for their role, and is reviewed and removed when it is no longer needed.
• We require strong authentication, including multi-factor authentication, for access to critical systems.
• Secrets and credentials are kept out of source code.

5.Secure development

• Code changes go through peer review before they reach production.
• We keep third-party dependencies up to date and act on known vulnerabilities.
• We log and monitor our systems to detect and investigate unusual activity.

6.Our team and vendors

Team members are bound by confidentiality obligations and are expected to follow our security practices. We choose service providers with care and share with them only the data they need to provide their service.

7.Incident response

If we become aware of a security incident affecting customer data, we will investigate, act to contain it, and notify affected customers without undue delay and in line with our contractual and legal obligations.

8.Reporting a vulnerability

We welcome reports from security researchers. If you believe you have found a vulnerability in guidenai.com, Broxi AI or Genpio, email [email protected] with "Security" in the subject line. Please include:

• A description of the issue and where it occurs.
• Steps to reproduce it, with any proof-of-concept code or screenshots.
• The potential impact as you understand it.

When researching, please:

• Give us reasonable time to fix the issue before you disclose it publicly.
• Access only the minimum data needed to show the issue, and do not modify, delete or keep other people's data.
• Do not run denial-of-service attacks, social engineering, spam or physical attacks.
• Test only against accounts you own or have permission to use.

We will acknowledge your report, keep you updated as we investigate, and credit you if you wish once the issue is resolved. We will not take legal action against researchers who act in good faith and follow these guidelines.

9.Contact us

For security questions, including questionnaires as part of a procurement review, email [email protected]. Our Privacy Policy at guidenai.com/privacy explains how we handle personal information.