Last updated: June 2026
SecuritAI Technologies Ltd. (“SecuritAI,” “we,” “us,” or “our”) operates the AI Red Teaming and AI Firewall platform at securitai.io (the “Service”). This policy explains what data we collect, how we use it, and the additional commitments we make because our Service processes AI prompts and responses on your behalf.
Capitalized terms have the meaning given below. Personal Data means information relating to an identified or identifiable individual. Service means the SecuritAI website, API, and dashboard. You means the individual or organization using the Service. AI Content means the prompts, responses, and related data that pass through the Service when you use AI Red Teaming or the AI Firewall.
Account data: name, work email, company, and role when you sign up, request a demo, or contact us.
Usage data: IP address, browser and device information, pages visited, and API usage metrics (request counts, response times).
AI Content: when you route traffic through the AI Firewall or run an AI Red Teaming scan, the prompts and responses involved are processed by our systems in order to inspect, test, and protect them. See “How we handle AI Content” below — this is treated differently from ordinary personal data.
Cookies: we use essential cookies to operate the website and dashboard, and limited analytics cookies to understand site usage. You can control cookies through your browser settings.
This is the most important section if you are evaluating SecuritAI for AI security.
To provide and maintain the Service; to manage your account; to respond to support and demo requests; to send product and security updates you’ve opted into; to monitor usage for billing and abuse prevention; and to comply with legal obligations, including those under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
We share data only with: service providers who help us run the Service (hosting, email delivery, payment processing) under confidentiality obligations; the AI providers you configure the Firewall or Red Teaming to use, for the purpose of processing your AI Content; legal authorities where required by law; and with your consent.
We do not sell your personal data or your AI Content.
Prompt inspection and log storage take place in Canada. The call to the AI model you configure, and up to 2,000 characters of each prompt that our classification layer sends for analysis, are processed by our model provider in the United States. On-premises and private-VPC deployment options exist for organizations — including government and regulated entities — that require data to remain entirely within their own boundary. See our Government & Public Sector page for details.
Account data is retained while your account is active and for a reasonable period after to comply with legal and accounting obligations. AI Content log retention will follow your plan’s stated window (see “How we handle AI Content” above), and logs will then be deleted on a rolling basis. Deleted logs can remain in our backups for up to 14 days in normal operation before those backups are deleted.
We use encryption in transit, role-based access control, and audit logging. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security — but security is the foundation of this Service, not an afterthought.
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, withdraw consent, or object to certain processing. To exercise any of these rights, contact us at [email protected].
The Service is intended for business use and is not directed to individuals under 16. We do not knowingly collect personal data from children.
The Service may link to third-party sites. We are not responsible for the privacy practices of third-party sites.
We may update this policy from time to time. We will post the updated version here with a new “Last updated” date, and notify you of material changes where required.
SecuritAI Technologies Ltd. · Toronto, Canada
Email: [email protected]