Data Privacy
Privacy of customer data is top of mind. We follow industry best practices and follow all applicable privacy regulations.
Overview
Welcome to Glitter AI's Trust Center. Our commitment to data privacy and security is embedded in every part of our business.
About Glitter AI
Glitter AI makes business process documentation fast and easy. We help organizations turn every process into a step-by-step guide, streamlining operations and improving efficiency.
Our Security Commitment
At Glitter AI, security and privacy are foundational to everything we do. We implement industry-leading security controls and maintain compliance with rigorous standards to protect our customers' data and ensure business continuity.
What You'll Find Here
- Learn about our comprehensive security posture
- Access our security documentation and certifications
- Review our compliance frameworks and attestations
- Understand our data protection and privacy practices
For security inquiries or to request additional documentation, please contact our security team at security@glitter.io.
Compliance
SOC 2 Type II Auditor: GRSee Consulting 
HIPAA BAA available Reports and documents
The SOC 2 report is sent on request SOC 2 Type II report · on request
Subprocessor list · public Data Processing Agreement · public HIPAA and BAA · public Risk profile
Data access level Internal
Impact level Moderate
Recovery time objective 4 hours
Recovery point objective 24 hours
Critical dependence Yes
Third party dependence Yes
Hosting Major cloud provider
See the questions Product security
Data security
Application security
AI
Governance and ethics
Legal
Infrastructure
Frequently asked
Do you train any AI models on customer data? View all 1Security practices
Access Control
Access is tightly monitored and controlled at our company. We are happy to provide more details about our access control practices upon request.
Endpoint Security
We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.
Network Security
We protect our corporate network against external and internal threats.
Corporate Security
We implement internal measures and practices to maintain a high standard of security.
Policies
Our information security policies are reviewed and approved annually. Please contact us for more details.
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
Incident Response
We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.
Risk Management
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
Asset Management
We have strict asset management policies in place to ensure that all assets are accounted for and secure.
BC/DR
We have a business continuity plan in place to ensure that we can continue to operate in the event of a disaster.
Training
We provide security awareness training to all employees to ensure that they are aware of security best practices.
Change Management
We have a change and configuration management process in place to ensure that changes are properly reviewed and approved.
Physical and Environment
We have physical and environmental controls in place to ensure that our data centers are secure and reliable.
Continuous Monitoring
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.
Updates
2026-09 Trust Center moved in-house; the SOC 2 Type II report is available on request.
2026-06 ElevenLabs added to the subprocessor list for AI voice narration.
Questions? security@glitter.io
AI Overview
Glitter AI uses third-party AI services to enhance its business process documentation platform. We use OpenAI for language model processing and Google’s Vertex AI (Gemini) for video analysis. Glitter AI never trains on customer data and only uses established cloud AI providers with proper security certifications.
AI Training Data and Bias
Glitter AI does not train AI models on customer data. We exclusively use third-party AI providers (OpenAI, Google Vertex AI) that manage their own training data and bias mitigation. Customer data sent to these services is processed in real-time and not retained for training purposes.
AI Security
Glitter AI ensures secure AI processing through encrypted data transmission (TLS 1.2+) to OpenAI and Google Vertex AI services. All API communications use authenticated connections and are monitored. We conduct regular security assessments of AI service providers and maintain SOC 2/3 compliance documentation from our vendors.
AI Monitoring
Glitter AI monitors AI service usage through AWS CloudWatch and GCP Cloud Audit Logs for all third-party AI providers (OpenAI, Google Vertex AI, ElevenLabs). We track API usage patterns, authentication events, and data processing activities. The Security Officer reviews AI monitoring reports quarterly and maintains automated alerting for unusual AI processing patterns or security events.
Evaluation & Red-Teaming
Glitter AI relies on third-party AI provider security evaluations and testing. OpenAI and Google conduct their own red-teaming and safety evaluations which we review quarterly. We perform internal testing of AI integrations focusing on prompt injection, data leakage, and unauthorized access scenarios. Our engineering team conducts security reviews of all AI implementations before production deployment.
AI Risk Management
Glitter AI incorporates AI-specific risks into the enterprise risk management framework. The Security Officer conducts quarterly risk assessments covering third-party AI provider dependencies, data privacy risks, and API security vulnerabilities. All identified AI risks are tracked in the risk register with mitigation plans and review cycles. We maintain contingency plans for AI service outages and data breach scenarios.
AI Governance
Glitter AI maintains AI governance through the Security Officer who oversees all AI service implementations and vendor relationships. The Board of Directors receives quarterly reports on AI usage, risks, and security posture. All AI integrations require security review before deployment and must comply with privacy-by-design principles. We maintain clear policies for employee AI usage and require specialized training for engineering staff.
Responsible AI Statement
Glitter AI is committed to responsible AI use that prioritizes customer data protection and privacy. We never train AI models on customer data and implement data redaction features to protect sensitive information. Our AI processing enhances productivity while maintaining user control over their data at all times.
Third-Party AI Diligence
Glitter AI maintains vendor agreements with OpenAI and Google (Vertex AI) that include security, privacy, and data protection provisions. We conduct quarterly risk assessments of AI providers and maintain their SOC 2/3 reports. All AI service contracts include data processing addendums and breach notification requirements.
Employee AI Usage
Glitter AI requires all personnel to complete AI security training as part of the Security Training Program. Engineering staff complete specialized “Securing Generative AI” training via LinkedIn Learning. All staff receive annual refresher training covering emerging AI threats and secure AI usage practices. Training completion is tracked and documented with 100% compliance required.