Welcome to Glitter AI's Trust Center. Our commitment to data privacy and security is embedded in every part of our business.
Glitter AI makes business process documentation fast and easy. We help organizations turn every process into a step-by-step guide, streamlining operations and improving efficiency.
At Glitter AI, security and privacy are foundational to everything we do. We implement industry-leading security controls and maintain compliance with rigorous standards to protect our customers' data and ensure business continuity.
For security inquiries or to request additional documentation, please contact our security team at security@glitter.io.
SOC 2 Type II Auditor: GRSee Consulting 
HIPAA BAA available Glitter AI welcomes responsible security disclosure reports to help improve our security posture. Please report security vulnerabilities or concerns to security@glitter.io. We appreciate your responsible disclosure and will work with you to address any legitimate security issues promptly.
Glitter AI implements bot protection through Vercel’s Edge Network security features. Bot protection is enabled on our web application to defend against automated attacks, spam, and malicious crawlers. The system includes rate limiting and automated detection of suspicious traffic patterns to protect application resources.
Glitter AI implements comprehensive Static Application Security Testing (SAST) using Snyk integrated with GitHub. Code analysis runs automatically on every pull request, blocking high-severity vulnerabilities from being merged. Monthly security reports review code vulnerabilities, and all findings are tracked in GitHub Issues with defined remediation timelines based on severity levels.
Glitter AI implements comprehensive credential management using 1Password for secure storage and management of credentials across all systems. All personnel use unique credentials with mandatory multi-factor authentication. Quarterly access reviews ensure proper credential usage, and all credential usage logs are collected and retained for one year with quarterly anomaly reviews.
Glitter AI implements runtime application security monitoring through Sentry with automated alerting for application runtime errors. All application errors are monitored continuously and tracked in GitHub Issues for resolution. The system provides real-time visibility into application behavior and potential security issues during runtime execution.
Glitter AI provides comprehensive security training for all development personnel. Engineering staff receive role-specific training including secure coding practices, OWASP Top 10, code review security checklists, and dependency management. All personnel complete annual security awareness training, with onboarding security training completed within 30 days of start date.
Glitter AI maintains software bill of materials tracking. All application dependencies are monitored for vulnerabilities with automated scanning before each deployment and weekly automated scans. Dependency versions and security status are tracked in our GitHub repositories with automated pull requests for security updates.
Glitter AI follows a secure Software Development Lifecycle with GitHub-based version control and protected main branch. All code changes require pull requests with peer review and automated security scanning. Development includes security requirements identification, secure coding practices, and comprehensive testing including unit tests and security checks before deployment to production.
Glitter AI implements comprehensive vulnerability management with weekly automated scans using Snyk and Google Cloud Security Command Center. Vulnerabilities are remediated based on defined SLAs: critical within 24 hours, high within 7 days, medium within 30 days, and low within 90 days. All findings are tracked with formal remediation plans and monthly patch deployment schedules.
Glitter AI implements Web Application Firewall protection through Vercel’s Edge Network security features. WAF rules are enabled to protect against common web application attacks, including DDoS protection with automatic mitigation, rate limiting, and bot protection. The system provides continuous protection against OWASP Top 10 threats and other application-layer attacks.