Trust Center

Glitter AI maintains comprehensive audit logging across all systems to enable security monitoring and compliance. Google Cloud Audit Logs capture admin activity and data access across every project. All logs are encrypted with AES-256 and retained for 180+ days. Security Command Center provides continuous threat detection with automated alerting.

Glitter AI implements comprehensive data security measures to protect customer information throughout its entire lifecycle.

Data Protection

• End-to-end encryption for data in transit and at rest
• AES-256 encryption standards for stored data
• TLS 1.2+ for all data transmissions
• Regular encryption key rotation and management

Access Controls

• Principle of least privilege for all data access
• Role-based permissions and access restrictions
• Multi-factor authentication requirements
• Regular access reviews and deprovisioning

Data Classification

• Systematic classification of all data types
• Appropriate handling procedures for each classification level
• Clear data retention and disposal policies
• Regular data inventory and mapping exercises

Glitter AI integrates with carefully vetted third-party services to enhance functionality while maintaining security. Key integrations include Google Cloud, Vercel, Stripe for payments, OpenAI, Google and ElevenLabs for AI services, Mixpanel for analytics, Intercom for support, and Sentry for monitoring. All integrations use encrypted connections (TLS 1.2+), API tokens with scoped permissions, and undergo security assessments.

Multi-factor authentication is mandatory for all administrative and production system access at Glitter AI, and is enforced on every cloud, code hosting, and SaaS console the company uses. User authentication in the product supports MFA, providing secure access to all customer-facing features.

Glitter AI uses a secure, scalable cloud architecture built on Google Cloud and Vercel. The system features multiple security boundaries including application layer authentication via Supabase Auth, encrypted data storage with AES-256, TLS 1.2+ for all communications, and Row Level Security policies. Infrastructure includes CDN distribution, serverless functions, and automated backups with 4-hour RTO and 24-hour RPO for disaster recovery.

Glitter AI implements comprehensive role-based access control following the principle of least privilege. Access to production databases and cloud consoles is limited to named individuals, and all administrative access requires documented business justification. Quarterly access reviews ensure permissions remain appropriate, and Row Level Security enforces user data isolation at the database level.

Glitter AI maintains service level commitments with 4-hour Recovery Time Objective (RTO) and 24-hour Recovery Point Objective (RPO) for disaster recovery scenarios. The platform leverages cloud provider SLAs from Google Cloud and Vercel for infrastructure reliability. Monitoring and alerting systems provide real-time visibility into system performance and availability through Sentry, Google Cloud Monitoring, and automated health checks.

Glitter AI supports SAML and OAuth single sign-on in the product, and its own internal systems run on Google Workspace SSO. On eligible plans, admins connect their identity provider, can enforce SSO so members only sign in through it, and set the organization’s session length from 1 day up to 90 days. All SSO connections use industry-standard protocols.

Glitter AI provides comprehensive team management capabilities through Supabase Auth and role-based access controls. Administrators can manage user permissions, assign team roles, and control access to organizational resources. The product includes user provisioning and deprovisioning workflows, team collaboration features, and audit trails for all user management activities.