Data Processing Agreement
We maintain full GDPR compliance through comprehensive data protection measures and privacy controls. For Enterprise customers, we offer a robust Data Processing Agreement (DPA) that outlines our commitment to data protection and details our data handling practices in accordance with GDPR requirements. To initiate the DPA signing process or discuss specific data protection needs, please reach out to your Personal AI point of contact, or send us an email at enterprise-support@personal.ai. They will guide you through the process and ensure all necessary documentation is properly executed.
Privacy Notice
How Personal AI collects, uses, and protects personal data.
Cookie Notice
Use of cookies and similar technologies on our platform.
Terms of Service
Rules and conditions for using Personal AI products and services.
Acceptable Use Policy
Permitted and prohibited behaviors when using our services.
Trust Center
Central resource for security, privacy, compliance, and transparency.
Subprocessors
Third-party vendors authorized to process data on our behalf.
Subprocessor update
Notices about additions or changes to our subprocessors list.
Data Request
How users can access, correct, or delete their personal data.
Service Uptime
Availability and performance metrics for our systems.
Frequently Asked Questions
How do you protect our data during transmission?
How do you protect our data during transmission?
We use secure data transmission protocols to encrypt all confidential and sensitive data when transmitted over public networks. Our SSL certificates ensure end-to-end encryption, and we maintain documented cryptography policies that govern all data transmission security measures.
How do I request a SOC 2 report?
How do I request a SOC 2 report?
Request a SOC 2 report by visiting https://trust.personal.ai/resources.
Who should I contact to start the DPA process or discuss data protection requirements?
Who should I contact to start the DPA process or discuss data protection requirements?
To initiate the DPA signing process or discuss specific data protection needs, please reach out to your Personal AI point of contact, or send us an email at enterprise-support@personal.ai.
Do you have compliance certifications?
Do you have compliance certifications?
Yes, we maintain SOC2 compliance and are working toward ISO 27001 certification. We undergo regular third-party security audits and assessments to ensure we meet industry standards for data protection and security controls.
What is Personal AI's Intrusion Detection System (IDS) and how does it work?
What is Personal AI's Intrusion Detection System (IDS) and how does it work?
We use Google Cloud IDS as our primary intrusion detection system, providing automated threat detection and intrusion monitoring across our Google Cloud Platform infrastructure that hosts all Personal AI services. Our IDS integrates seamlessly with our broader security stack, including Virtual Private Cloud for network protection, Google Cloud Monitoring for alerts, Twingate for secure remote access, and Auth0 for identity management. It’s critical for early threat detection, maintaining SOC 2 compliance, and protecting PII data for our 25 employees and thousands of users - especially important following our recent lounge security incident. Our IT/Engineering team actively monitors the IDS environment as part of our overall security posture and incident response procedures.