Welcome to Glitter AI's Trust Center. Our commitment to data privacy and security is embedded in every part of our business.
Glitter AI makes business process documentation fast and easy. We help organizations turn every process into a step-by-step guide, streamlining operations and improving efficiency.
At Glitter AI, security and privacy are foundational to everything we do. We implement industry-leading security controls and maintain compliance with rigorous standards to protect our customers' data and ensure business continuity.
For security inquiries or to request additional documentation, please contact our security team at security@glitter.io.
SOC 2 Type II Auditor: GRSee Consulting 
HIPAA BAA available Glitter AI uses third-party AI services to enhance its business process documentation platform. We use OpenAI for language model processing and Google’s Gemini Enterprise Agent Platform for video analysis. Glitter AI never trains on customer data and only uses established cloud AI providers with proper security certifications.
Glitter AI does not train AI models on customer data. We exclusively use third-party AI providers (OpenAI, Google Gemini Enterprise Agent Platform) that manage their own training data and bias mitigation. Customer data sent to these services is processed in real-time and not retained for training purposes.
Glitter AI ensures secure AI processing through encrypted data transmission (TLS 1.2+) to OpenAI and Google Gemini Enterprise Agent Platform services. All API communications use authenticated connections and are monitored. We conduct regular security assessments of AI service providers and maintain SOC 2/3 compliance documentation from our vendors.
Glitter AI monitors AI service usage through Google Cloud Audit Logs and Cloud Monitoring for all third-party AI providers (OpenAI, Google Gemini Enterprise Agent Platform, ElevenLabs). We track API usage patterns, authentication events, and data processing activities. The Security Officer reviews AI monitoring reports quarterly and maintains automated alerting for unusual AI processing patterns or security events.
Glitter AI relies on third-party AI provider security evaluations and testing. OpenAI and Google conduct their own red-teaming and safety evaluations which we review quarterly. We perform internal testing of AI integrations focusing on prompt injection, data leakage, and unauthorized access scenarios. Our engineering team conducts security reviews of all AI implementations before production deployment.
Glitter AI incorporates AI-specific risks into the enterprise risk management framework. The Security Officer conducts quarterly risk assessments covering third-party AI provider dependencies, data privacy risks, and API security vulnerabilities. All identified AI risks are tracked in the risk register with mitigation plans and review cycles. We maintain contingency plans for AI service outages and data breach scenarios.
Glitter AI maintains AI governance through the Security Officer who oversees all AI service implementations and vendor relationships. The Board of Directors receives quarterly reports on AI usage, risks, and security posture. All AI integrations require security review before deployment and must comply with privacy-by-design principles. We maintain clear policies for employee AI usage and require specialized training for engineering staff.
Glitter AI is committed to responsible AI use that prioritizes customer data protection and privacy. We never train AI models on customer data and implement data redaction features to protect sensitive information. Our AI processing enhances productivity while maintaining user control over their data at all times.
Glitter AI maintains vendor agreements with OpenAI and Google (Gemini Enterprise Agent Platform) that include security, privacy, and data protection provisions. We conduct quarterly risk assessments of AI providers and maintain their SOC 2/3 reports. All AI service contracts include data processing addendums and breach notification requirements.
Glitter AI requires all personnel to complete AI security training as part of the Security Training Program. Engineering staff complete specialized “Securing Generative AI” training via LinkedIn Learning. All staff receive annual refresher training covering emerging AI threats and secure AI usage practices. Training completion is tracked and documented with 100% compliance required.