Data Privacy
Privacy of customer data is top of mind. We follow industry best practices and follow all applicable privacy regulations.
Overview
Welcome to Glitter AI's Trust Center. Our commitment to data privacy and security is embedded in every part of our business.
About Glitter AI
Glitter AI makes business process documentation fast and easy. We help organizations turn every process into a step-by-step guide, streamlining operations and improving efficiency.
Our Security Commitment
At Glitter AI, security and privacy are foundational to everything we do. We implement industry-leading security controls and maintain compliance with rigorous standards to protect our customers' data and ensure business continuity.
What You'll Find Here
- Learn about our comprehensive security posture
- Access our security documentation and certifications
- Review our compliance frameworks and attestations
- Understand our data protection and privacy practices
For security inquiries or to request additional documentation, please contact our security team at security@glitter.io.
Compliance
SOC 2 Type II Auditor: GRSee Consulting 
HIPAA BAA available Reports and documents
The SOC 2 report is sent on request SOC 2 Type II report · on request
Subprocessor list · public Data Processing Agreement · public HIPAA and BAA · public Risk profile
Data access level Internal
Impact level Moderate
Recovery time objective 4 hours
Recovery point objective 24 hours
Critical dependence Yes
Third party dependence Yes
Hosting Major cloud provider
See the questions Product security
Data security
Application security
AI
Governance and ethics
Legal
Infrastructure
Frequently asked
Do you train any AI models on customer data? View all 1Security practices
Access Control
Access is tightly monitored and controlled at our company. We are happy to provide more details about our access control practices upon request.
Endpoint Security
We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.
Network Security
We protect our corporate network against external and internal threats.
Corporate Security
We implement internal measures and practices to maintain a high standard of security.
Policies
Our information security policies are reviewed and approved annually. Please contact us for more details.
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
Incident Response
We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.
Risk Management
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
Asset Management
We have strict asset management policies in place to ensure that all assets are accounted for and secure.
BC/DR
We have a business continuity plan in place to ensure that we can continue to operate in the event of a disaster.
Training
We provide security awareness training to all employees to ensure that they are aware of security best practices.
Change Management
We have a change and configuration management process in place to ensure that changes are properly reviewed and approved.
Physical and Environment
We have physical and environmental controls in place to ensure that our data centers are secure and reliable.
Continuous Monitoring
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.
Updates
2026-09 Trust Center moved in-house; the SOC 2 Type II report is available on request.
2026-06 ElevenLabs added to the subprocessor list for AI voice narration.
Questions? security@glitter.io
Responsible Disclosure
Glitter AI welcomes responsible security disclosure reports to help improve our security posture. Please report security vulnerabilities or concerns to security@glitter.io. We appreciate your responsible disclosure and will work with you to address any legitimate security issues promptly.
Bot Detection
Glitter AI implements bot protection through Vercel’s Edge Network security features. Bot protection is enabled on our web application to defend against automated attacks, spam, and malicious crawlers. The system includes rate limiting and automated detection of suspicious traffic patterns to protect application resources.
Code Analysis
Glitter AI implements comprehensive Static Application Security Testing (SAST) using Snyk integrated with GitHub. Code analysis runs automatically on every pull request, blocking high-severity vulnerabilities from being merged. Monthly security reports review code vulnerabilities, and all findings are tracked in GitHub Issues with defined remediation timelines based on severity levels.
Credential Management
Glitter AI implements comprehensive credential management using 1Password for secure storage and management of credentials across all systems. All personnel use unique credentials with mandatory multi-factor authentication. Quarterly access reviews ensure proper credential usage, and all credential usage logs are collected and retained for one year with quarterly anomaly reviews.
Runtime Application Self Protection
Glitter AI implements runtime application security monitoring through Sentry with automated alerting for application runtime errors. All application errors are monitored continuously and tracked in GitHub Issues for resolution. The system provides real-time visibility into application behavior and potential security issues during runtime execution.
Secure Development Training
Glitter AI provides comprehensive security training for all development personnel. Engineering staff receive role-specific training including secure coding practices, OWASP Top 10, code review security checklists, and dependency management. All personnel complete annual security awareness training, with onboarding security training completed within 30 days of start date.
Software Bill of Materials (SBOM)
Glitter AI maintains software bill of materials tracking. All application dependencies are monitored for vulnerabilities with automated scanning before each deployment and weekly automated scans. Dependency versions and security status are tracked in our GitHub repositories with automated pull requests for security updates.
Software Development Lifecycle
Glitter AI follows a secure Software Development Lifecycle with GitHub-based version control and protected main branch. All code changes require pull requests with peer review and automated security scanning. Development includes security requirements identification, secure coding practices, and comprehensive testing including unit tests and security checks before deployment to production.
Vulnerability & Patch Management
Glitter AI implements comprehensive vulnerability management with weekly automated scans using Snyk, AWS GuardDuty, and GCP Security Command Center. Vulnerabilities are remediated based on defined SLAs: critical within 24 hours, high within 7 days, medium within 30 days, and low within 90 days. All findings are tracked in GitHub Issues with formal remediation plans and monthly patch deployment schedules.
Web Application Firewall
Glitter AI implements Web Application Firewall protection through Vercel’s Edge Network security features. WAF rules are enabled to protect against common web application attacks, including DDoS protection with automatic mitigation, rate limiting, and bot protection. The system provides continuous protection against OWASP Top 10 threats and other application-layer attacks.