Trust and security
You know where your data lives. And what the AI sees of it.
Handing tasks to an AI agent means handing it conversations with your customers and candidates. Here is exactly how we protect them.
Data
Stored in Canada. Processed without personal information.
Hosting in Canada
Conversations, action history and the information you entrust to us are hosted in Canada.
Processing by the AI model
The AI model that understands and writes the messages is operated in the United States. It does not receive personal information: only the information needed to process the request is sent to it, with no name, contact details or identifier.
No training on your data
Your conversations are not used to train our providers' AI models.
Limited retention
Data is kept for [retention period], then deleted. You can ask for it to be deleted before then.
Québec's Law 25
Compliance with the Act respecting the protection of personal information.
Yenilik is operated by 2AF Inc., a Québec company subject to Québec's Law 25.
Designated person in charge
Person in charge of the protection of personal information: [Nom de la personne responsable de la protection des renseignements personnels], [Titre]. To reach them: [courriel]@yenilik.ai.
Assessment before any transfer
Before any personal information is communicated outside Québec, a privacy impact assessment is carried out, as required by law.
Your rights
Access, correction, withdrawal of consent and deletion: write to us, and we will respond within the time limits set by law.
Register of subcontractors
| Subcontractor | Role | Location | Personal information received |
|---|---|---|---|
| [Hosting provider] | Hosting of data and the console | Canada | Yes, encrypted |
| [AI model provider] | Understanding and writing messages | United States | No |
| Meta (WhatsApp Business) | Messaging channel | [to be confirmed] | Number and messages, under WhatsApp's terms |
Security
A framework based on the ISO/IEC 27001 standard.
The 2AF Inc. team includes a certified ISO/IEC 27001 Lead Implementer. Their practices govern how Yenilik is operated.
Encryption
At rest and in transit.
Segregation
Each customer's data is isolated.
Limited access
Only the people who need access have it, with two-factor authentication.
Audit log
Every action by an agent is recorded and can be reviewed.
Responsible AI
Our rules for every agent.
Transparency
Every agent identifies itself as an AI. No one thinks they are talking to a human.
A human available
A customer can always ask to speak to someone on your team.
Nothing made up
An agent that doesn't know the answer says so, instead of making one up.
Human approval
Actions that commit the business wait for your approval, according to your settings.