Human control
- Nothing sends without human approval. HiVayne prepares drafts and recommendations; a person reviews and decides.
- Recommendations require human judgment and are not automated high-impact decisions about people.
Evidence and grounding
- Transcript-based memories require exact, source-supported quotes.
- Speaker attribution is preserved only when it is grounded in the source.
- Memories and recommendations can be traced back to the conversation they came from.
Data handling
- Customer-facing relationship responses are built through a restricted, safe projection.
- Internal inspection fields are excluded from customer-facing relationship responses.
- Internal inspection and debugging routes are disabled in production.
- Provider data is normalized before downstream processing, rather than passed through directly.
Isolation and control
- Workspaces are scoped and isolated as a trust boundary in the architecture.
- Connected sources can be disconnected.
- Privacy-request and deletion workflows are being established; see Your Privacy Choices.
What we do not claim
Honest boundaries. HiVayne does not currently claim SOC 2, ISO 27001, HIPAA compliance, or any other formal security certification. We do not currently make representations about end-to-end encryption, formal penetration testing, a formal incident-response program, guaranteed deletion from every backup, or data-residency guarantees. We will describe such measures only after they are implemented and verified.
Reporting a concern
To report a security concern, contact [SECURITY OR PRIVACY EMAIL]. Please do not include sensitive details in an initial message.