Trust
Security you can verify.
Avi is a product of Serverless, Inc. Here is how we protect your data, and how to verify it.
Certifications and audits
Independent assessments of how Avi is built and run.
Google CASA AL2
CertifiedGoogle's Cloud Application Security Assessment at Assurance Level 2, required of apps that work with restricted Google data, such as Gmail.
- Standard
- CASA v2.1.1, built on the OWASP Application Security Verification Standard
- Assessed by
- Prescient Security, a lab authorized by the App Defense Alliance
- Valid until
- October 19, 2027
SOC 2 Type II
Audited teamAvi in progressAn independent firm audits Serverless, Inc.'s security program — the same team, policies, and controls that run Avi.
Your data and AI
The question every security review starts with: what happens to our data when AI touches it.
Zero data retention by AI models
Our AI providers — language models, voice, and web search — process your data only to return results, and don't keep it. The one exception, Claude Fable 5.1, is retained for 30 days and needs your organization's opt-in.
See the providersNever used for training
Our AI providers never train on your data, and we never use it to train generalized AI models.
How we protect your data
The safeguards in place across the service, every day.
Encryption
Data is encrypted in transit over the internet and at rest in our databases and file storage. Secrets and OAuth tokens are encrypted again with industry-standard algorithms.
Access controls
Authenticated sessions and role-based permissions on all data. Integrations act on your behalf, only with the access you authorize.
Google data, Limited Use
Avi's use of data from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Based in the United States
We store customer data primarily in the United States. AI model providers may process prompts in other regions.
Data handling
Who we share data with, how long we keep it, and the agreements and rights behind it.
Your data, not for sale
The vendors that run the service may use your information only to provide it to us — never for their own purposes.
See subprocessorsDeletion
Your content is kept while your account is active. When you delete your account, your content is permanently deleted, backup copies expire within 35 days, and only minimal records required for tax, legal, and accounting remain.
DPA and transfers
Business customers can request a Data Processing Agreement. Transfers from the EEA or UK rely on Standard Contractual Clauses.
Your rights
Access, correct, delete, restrict, or export your personal data by writing to us — we respond within the time the law requires.
Subprocessors
Every vendor whose systems process customer data to run Avi, what it does, and what it receives.
Amazon Web Services (AWS)
Cloud infrastructure: compute, databases, file storage, caching, email (Amazon SES), scheduling, edge protection, and search embeddings and ranking (Amazon Bedrock).
Data: All customer data the Service stores.
Anthropic
AI model provider: Claude models, Avi's default for chat and Automations.
Data: Prompts and the context sent with them (messages, files, and tool results), and the model's outputs.
OpenAI
AI model provider: GPT models, used only when a person, organization, or Automation selects one.
Data: Prompts and the context sent with them, and the model's outputs.
Baseten
AI model provider: open-weight models (such as GLM, DeepSeek, and Kimi) and Avi's background processing, including conversation summaries, update curation, and voice-command routing.
Data: Prompts and the context sent with them, and the model's outputs.
AssemblyAI
Speech-to-text in voice mode.
Data: Your voice audio while voice mode is on.
ElevenLabs
Text-to-speech in voice mode.
Data: The text of Avi's spoken replies.
Exa
Web search and page reading when the agent searches the web for you.
Data: Search queries and web addresses, which may include context from your request.
Daytona
Isolated sandboxes for coding Automations.
Data: Code repositories you connect, task instructions, and the coding session's transcript.
Vercel
Hosting for the web app and the marketing site, and site analytics.
Data: Request metadata, such as IP address, pages visited, and browser.
Stripe
Payments and subscription billing.
Data: Billing name, email address, and payment details.
Resend
Organization invitation emails.
Data: The invitee's email address and the inviter's and organization's names.
PostHog
Product analytics in the web app and on the marketing site.
Data: Pages visited and interactions on the site and in the app; in the web app, also your account identifier and email address.
Expo
Mobile push notifications, delivered through Apple Push Notification service.
Data: Device push tokens and notification content, such as a message excerpt.
Sentry
Error and performance monitoring.
Data: Technical identifiers, error details, and usage metrics. Prompts and outputs are removed before sending.
Feed.fm
Licensed background music in voice mode.
Data: A pseudonymous listener ID and playback events.
Integrations you connect with your own accounts, such as Google, Slack, or GitHub, are not subprocessors.
Running a security review?
Send us your security questionnaire or report a vulnerability — we reply directly.