Policies
Information security policies are reviewed and approved annually. Contact the security team for more detail.
Overview
Welcome to Glitter AI's Trust Center. Our commitment to data privacy and security is embedded in every part of our business.
About Glitter AI
Glitter AI makes business process documentation fast and easy. We help organizations turn every process into a step-by-step guide, streamlining operations and improving efficiency.
Our Security Commitment
At Glitter AI, security and privacy are foundational to everything we do. We implement industry-leading security controls and maintain compliance with rigorous standards to protect our customers' data and ensure business continuity.
What You'll Find Here
- Learn about our comprehensive security posture
- Access our security documentation and certifications
- Review our compliance frameworks and attestations
- Understand our data protection and privacy practices
For security inquiries or to request additional documentation, please contact our security team at security@glitter.io.
Compliance
SOC 2 Type II Auditor: GRSee Consulting 
HIPAA BAA available Reports and documents
The SOC 2 report is sent on request SOC 2 Type II report · on request
Subprocessor list · public Data Processing Agreement · public HIPAA and BAA · public Product security
Data security
Application security
AI
Risk profile
Data access level Internal
Impact level Moderate
Recovery time objective 4 hours
Recovery point objective 24 hours
Critical dependence Yes
Third party dependence Yes
Hosting Google Cloud and Vercel
See the questions Governance and ethics
Legal
Infrastructure
Security practices
Frequently asked
Do you train any AI models on customer data?Where is my data stored?Is my data encrypted?Who can see my guides?Which third parties process my data?Can I keep sensitive information from leaving my computer?How do I get the SOC 2 report? View all 15 Questions? security@glitter.io
Incident Response
A dedicated team responds to security incidents. More detail on incident response practices is available on request.
Risk Management
A dedicated team manages security risks. More detail on risk management practices is available on request.
Change Management
A change and configuration management process ensures that changes are properly reviewed and approved.
Asset Management
Strict asset management policies ensure that all assets are accounted for and secure.
Training
All employees receive security awareness training so that they are aware of security best practices.
Security Grades
Glitter AI constantly monitors the security of its website and will post grades from public security rating agencies when they become available.