Security

AI Web GPT protects your data with TLS 1.2+ encryption in transit and AES-256 encryption at rest, runs entirely on certified cloud infrastructure, and never uses your content or your customers' conversations to train AI models.

AI Web GPT is hosted on Google Cloud, whose infrastructure and operations are independently certified against SOC 2, ISO 27001, and other major security and privacy standards. The WhatsApp channel runs exclusively on Meta's official WhatsApp Business Cloud API, and payments are processed by Stripe, a PCI DSS Level 1 certified provider. We never see or store your payment card details.

All data transmitted between your browser and our servers is protected using TLS 1.2 or higher. Data stored at rest is encrypted using AES-256, the industry standard for secure data storage.

We do not use client data to train AI models. Your documents, conversations, and any content processed through AI Web GPT remain exclusively yours and are never shared with third parties for training or analytics purposes. Answers are generated exclusively from your own website content and uploaded documents, and every answer cites the page it came from.

AI Web GPT is designed with GDPR principles in mind. Users have the right to access, correct, and delete their personal data at any time — see our data deletion process. We maintain appropriate technical and organisational measures to protect personal data in accordance with applicable data protection laws.

Our infrastructure is continuously monitored to detect and respond to threats in a timely manner. Access to production systems and customer data is restricted, logged, and reviewed.

If you discover a security vulnerability, please contact us responsibly. We take all reports seriously and will respond promptly.