Trust

Security & Compliance

How we protect your data, your intelligence, and your trust.

Our Commitment

Phi handles sensitive business intelligence, your brand voice, customer data, sales strategies, and domain expertise. We treat that responsibility with the gravity it deserves. Security isn't a feature we bolt on. It's foundational to how we build, train, and deploy.

Security Pillars

Data Isolation

Every client's training data exists in a logically isolated environment. Your brand voice, customer profiles, and domain expertise are never shared with, visible to, or used to benefit other clients. Period.

Encryption

All data is encrypted in transit using TLS 1.2+ and at rest using AES-256. Your information is protected whether it's moving between systems or sitting in storage.

Access Controls

Client data access is restricted to authorized team members on a need-to-know basis. We employ role-based access controls and audit logging across our infrastructure.

Infrastructure

Our platform runs on established cloud providers and our own managed servers, with PostgreSQL row-level security on every client's data.

AI Model Security

Training data submitted to Phi is used solely to configure your agent. We do not fine-tune foundation models on your data. Your business intelligence informs prompt architecture and retrieval systems, it is not absorbed into any shared model.

Data Retention & Deletion

Active client data is retained during your subscription. Upon termination, data is held for 90 days for potential reactivation, then permanently deleted on request. You own your data, always.

Compliance Readiness

Phi is designed to support clients in regulated industries. Our practices are built to align with SOC 2 Type II, GDPR, and CCPA standards. We do not currently hold a SOC 2 certification. We welcome security questionnaires and are happy to discuss our practices in detail with your compliance or IT team.

Have security questions or need to submit a vendor assessment? We're ready.

Contact Our Team →