Security
How we protect your data
In short: we apply reasonable technical and organisational measures to protect your data: a secure connection, access control and workspace isolation, logging of key actions and regular backups. At the same time, absolute security does not exist on the internet, and part of the responsibility for keeping your access safe rests with you. We do not train models of our own on your data, but we are not responsible for the behaviour of third-party providers' models and do not guarantee that your data will not be used to train them — see the document on data in AI usage for details.
1. About this document
This document describes the security measures the Operator applies to protect the data of users of the SuperIntellect (SUIN.AI) platform (the "Platform"), and sets out the boundaries of responsibility between the Operator and the user.
The Operator of the Platform is Individual Entrepreneur Rybin Mikhail Alekseevich (TIN 384905822927, OGRNIP 320385000051839) (the "Operator", "we"). This document supplements the Public Offer, the Personal Data Processing Policy and Data, Confidentiality and Intellectual Property in AI Usage. In the event of any discrepancy, the Public Offer and the Personal Data Processing Policy prevail.
This document is informational in nature and does not constitute a public warranty of any specific technical characteristics; the measures described here may evolve and change as the Platform develops.
2. Secure connection
Traffic between your device and the Platform is transmitted over the secure HTTPS (TLS) protocol, which reduces the risk of data being intercepted in transit.
3. Data storage
Access to the Platform's databases and file storage is restricted and controlled. We aim to encrypt stored data wherever the infrastructure supports it, and we limit the number of people with access to servers and storage.
4. Workspace isolation
Each workspace is a separate logical area. The data and documents of one workspace are not mixed with those of another and are available only to members with the corresponding rights.
5. Access control and roles
Access to data inside a workspace is governed by the roles and permissions of its members: invited users receive only the level of access assigned to them. Access to the Platform is protected by authentication; the user is responsible for keeping their own credentials safe (see section 9).
6. Action logging
Key actions on the Platform are recorded in time-stamped logs. This helps us investigate incidents and reconstruct the sequence of events.
7. Infrastructure location
The Platform's core infrastructure is hosted on servers located in the Russian Federation. When AI models are called, however, the content of your requests is passed to third-party model providers whose infrastructure may be located outside Russia — this is described in the document on data in AI usage.
8. Backups
We run regular backups of Platform data to reduce the risk of losing it in the event of a technical failure. Backups do not remove your own responsibility for saving the results that matter to you.
9. Training models on data
We do not develop or train AI models of our own and therefore do not use your data to train any models of ours.
Your requests are processed by third-party model providers. Their internal processes — storage, security and the possible use of data to train their models — are outside the Operator's control. We do not guarantee or represent that the data you submit will not be used by third-party providers to train their models: any statements to that effect are statements by the providers themselves, which may change and which we do not control. For details, see Data, Confidentiality and Intellectual Property in AI Usage.
10. Your responsibility and access hygiene
Security is a shared effort. On your side, you undertake to:
- protect your credentials (password, access codes) and not share them with third parties;
- manage the membership of your workspace and the rights of its members, revoking access promptly from anyone who no longer needs it;
- not submit to AI models the personal data of third parties or confidential information without the necessary rights and consents;
- save important results yourself rather than relying solely on storage within the Platform;
- notify us of any suspicion of unauthorised access.
11. No absolute security
We make reasonable efforts to protect data, however no system for transmitting and storing data on the internet can be considered absolutely secure. We cannot guarantee that data will never be intercepted, lost or disclosed as a result of the actions of third parties, failures of third-party services or events of force majeure. By using the Platform you accept this residual risk to the extent permitted by law. This clause does not limit the Operator's liability in cases where such a limitation is expressly prohibited by applicable law (including consumer protection law).
12. Reporting a security problem
If you have found a vulnerability or suspect unauthorised access to data, please write to us at hello@suin.ai. We will review your report and take reasonable action.