Security

At Salescaling, data security and privacy are fundamental. This document details the security measures implemented and how we handle our users' information.

AI Data Processing

Current AI Model

• We use Google Gemini as our Generative AI LLM model
• Google's privacy policy applies
• Google does not use input data to train its models
• All information travels encrypted in transit until it reaches the LLM

Future Improvements

• We are developing the option for customers to use their own AI model if they wish
• This will allow absolute control over information processing
• Customers will be able to choose the model that best suits their privacy needs

Security Measures

Data Encryption

• All communications are encrypted using TLS
• Data stored in the database is encrypted at rest using AES-256
• Daily backups are encrypted and retained for 14 days

Authentication and Authorization

• We use Auth0 as our authentication platform
• We do not store passwords
• Permissions are managed based on the role within each organization

Data Isolation

• Data is segmented at the database level
• Each organization can only access its own data

Monitoring and Control

• We monitor access logs
• We implement alerts for sensitive operations
• We track user activity for debugging
• We maintain a detailed log of all critical operations

Infrastructure

• We use cloud infrastructure
• We apply least privilege policies
• Access is restricted only to authorized personnel

Support

If you have security questions, please contact our support team.

Vulnerability Detection

If you find a vulnerability, please contact our security team at security@salescaling.com.