Security & Privacy
At Tesserae, security is at the core of our platform. We understand that your presentations contain sensitive business information, and we are committed to keeping your data secure.
Data Security
- Secure Cloud Storage: Your past presentations are stored in Google Cloud Storage and a private Google Drive folder, ensuring enterprise-grade security.
- Encrypted Database: User data is stored in a private PostgreSQL instance on Google Cloud Platform (GCP).
Access Control & Authentication
- Google OAuth SSO: We use Google OAuth for authentication, providing seamless and secure access.
- Restricted Access Management: At this time, access is managed on a per-user basis by our team to maintain control over permissions.
AI Model & Data Privacy
- We do not train our AI models on user data.
- If an organization opts in, we may train an organization-specific model on their data.
- We only use LLM APIs with robust enterprise agreements in place, which commit to not using customer data for training their models. We regularly review these agreements.
Compliance & Certifications
- Cyber Essentials Certified
- Planning for SOC 2 compliance to ensure best-in-class security practices.
Security Monitoring & Incident Response
- Cloud Logging: We actively monitor security logs for suspicious activity.
- Incident Response: In the event of a data breach, we will notify affected users within 48 hours of detection.
- Threat Detection: Currently, we rely on manual security reviews to assess risks and investigate potential threats.
Questions?
If you have security concerns or would like to discuss enterprise-specific security requirements, please reach out to us at security@trytesserae.com.
