Trust Through Transparency
We aim to be clear about what GiiS does with your data — from how credentials are stored to how queries are processed. If you need more detail for a security review, email hi@giis.ai.
Zero Data Training Guarantee
GiiS enforces a strict no-training-on-user-data policy across all API calls. Every integration with external LLM providers explicitly sets store=False, meaning your conversations, documents, and queries are never used to improve models or shared with third parties. This commitment is enforced at the code level and applies whether you deploy GiiS on your own infrastructure or use the managed GiiS Cloud service.
Authentication & Access Control
GiiS supports multiple authentication methods to fit your enterprise requirements:
- Basic authentication with email and password
- OAuth2 integration with major identity providers
- OIDC and SAML for enterprise SSO
- SCIM for automated user provisioning and access management
Role-Based Access Control (RBAC) in the Enterprise Edition allows you to gate access to documents, agents, actions, and set usage rate limits per team or user. Document-level permissions can be automatically synchronized from external sources like Google Drive, Salesforce, and others, or assigned manually for fine-grained control.
Encryption: At Rest & In Transit
For GiiS Cloud deployments, all data is encrypted at rest using AES-256 encryption and protected in transit with TLS 1.3.
Next Steps
- System Description — Understand GiiS architecture and components
- Access Controls — Learn about authentication and RBAC
- Data Storage — See how data is encrypted and persisted
- Data Flows — Trace how data moves through the system
- GiiS Cloud Security — Managed service security details
Questions? Get in touch with the GiiS security team.