Security & Sovereignty

Our Core Principle: No Training on Your Data

Your strategy will never be used to benefit other users or train AI models.

122ai operates exclusively on commercial AI APIs that contractually prohibit the use of customer data for model training. Your financial inputs, competitive analyses, and strategic discussions are processed solely to generate responses for you.

• Your Input and Output are not used to train foundational AI models
• Data submitted via the Service does not improve models for other users
• AI providers process requests only to return results to you

This commitment is enforced through contractual controls and technical safeguards with our AI providers.

Infrastructure & Compliance

We leverage SOC 2 Type II compliant infrastructure, built on the same foundations used by the world's largest financial institutions.

AES-256 Encryption (At Rest)

Your database entries are encrypted with the industry-standard algorithm used by financial institutions and government agencies worldwide.

TLS 1.3 (In Transit)

All data moving between your device and our servers is secured via the latest transport layer security protocols.

Strict Tenant Isolation

All database access is scoped to your authenticated user identity. Logical tenant isolation and application-level controls enforce per-user data boundaries. One user cannot access another user's data through the Service.

"Boardroom Mode" (Ephemeral Conversations)

For especially sensitive topics—such as M&A discussions, personnel decisions, or legal strategy—you may enable Boardroom Mode.

When Boardroom Mode is active:

• Not Written to Your History: Boardroom messages are not added to your saved conversation history. Documents created in a Boardroom session can be downloaded while it is open, but are not written to your history or document library, so they are not available after you leave the session in the app. Archiving is unavailable for these sessions.
• No Long-Term Memory: Content is excluded from personalization and memory systems.
• Real-Time Processing Only: Data is processed transiently to generate a response.
• Content-Redacted Logging: For Boardroom and Quick requests, the main chat pipeline's request-scoped content-bearing error logger is disabled. Other application logs may still record content-safe operational metadata and account/request identifiers. Ordinary-session logs may include provider-error details. Boardroom and Quick are not no-logging modes.

Note: Boardroom Mode does not eliminate all transient processing required to deliver the Service. Conversation content is not written to your history, but usage and billing counters are still recorded, and 122ai's standard request logs apply. AI processing occurs via Anthropic's API, which by default deletes API inputs and outputs within 30 days, with exceptions its policy describes, such as content flagged under its usage policies or a legal requirement to keep it.

Enterprise Identity Management

Authentication is handled by Clerk, the identity platform trusted by modern enterprises.

Multi-Factor Authentication

Enforced layers of protection for login.

Breach Detection

Proactive monitoring that alerts you if your credentials have been compromised.

Session Management

Remote logout capabilities to secure your account if a device is lost.

Data Sovereignty

You are not locked in. You are in control.

Full Export

Download your entire strategic history in PDF, Markdown, or JSON at any time.

Right to Deletion

One-click account deletion removes data from active systems. Deletion initiates cryptographic erasure and scheduled purge workflows. Limited, short-term backup retention exists solely for disaster recovery.

Built on Trusted Infrastructure