A security statement is worth exactly as much as the mechanism behind it. Below is a list of mechanisms, each with an answer to what happens when somebody tries to get around it.
Not marketing statements but architecture: the conditions are checked in front of the language model, not after it.
Organisation scope is a condition of the knowledge base query itself. It is not a filter over results that a coding slip could skip, but a condition without which the query does not exist. Another tenant's resource answers exactly like a non existent one.
An answer without coverage in published content is rejected whole, before the customer sees anything. The conversation then goes to a human. There is no mode that sends an answer and corrects it later.
Every turn, every confirmation card and every handoff leaves a record. The log accepts only redacted data: national identification numbers verified by checksum, IBAN numbers verified by the mod 97 algorithm, phone numbers, email addresses, card numbers and tokens are replaced with markers before the event is created.
The agent will not change data, place an order or send a message on its own. It issues a confirmation card that an operator approves with a separate click. The catalogue of available operations is closed and has two independent kill switches.
| Component | Location |
|---|---|
| Application, database, job queue | OVHcloud data centre in Warsaw |
| Voice transport | Our server in Warsaw, software run alongside the application |
| Speech recognition | The model provider (OpenAI), for the duration of the call |
| Language model and speech synthesis | External providers, named in the subprocessor register |
| Backups | A logical database dump kept on the server in Warsaw for a defined retention period, with restore requiring a human decision |
We do not claim that no data leaves the European Economic Area, because the language model and speech synthesis run at providers. For each of them we state the country of processing and the transfer basis in a separate register, instead of hiding it in one sentence.
Something you can verify in half a minute by opening the network tab in your browser tools.
The site sets no cookie at all. It stores one value in browser storage: the light or dark theme choice. No analytics or advertising tool runs here, so there is nothing for a banner to declare.
Fonts, styles and the conversation script come from aivatary.com. No content delivery network, no request to another company's server. That is not byte thrift but a decision that simplifies everything else in this document.
The processing agreement template, the subprocessor register and the AI systems notice are public. Nobody has to ask a salesperson for them.