AI data privacy and security practices

GTM by Grace follows a zero-persistence model: your data is processed in real time and not stored longer than necessary. PII is redacted before anything reaches an AI model — customer names become opaque IDs. All AI access is API-tier, where providers (Azure OpenAI, OpenAI, Anthropic, Google Vertex) are contractually prohibited from training on your data.

• Encryption — TLS 1.3 in transit, AES-256 at rest.
• BYOK — bring your own corporate AI credentials.
• Audit logs — full transparency on what was processed and when.
• Secret management — API keys live in environment variables, never in code repositories.

Compliance details and deployment options on a scoping call.