Trust Through Transparency

GiiS is built on a foundation of radical transparency and auditability. As an open-source project licensed under the MIT license, every line of code is available for inspection. Unlike proprietary systems that require blind trust, GiiS allows security researchers, enterprises, and independent auditors to verify exactly what the system does with your data — from how credentials are stored to how queries are processed.

Zero Data Training Guarantee

GiiS enforces a strict no-training-on-user-data policy across all API calls. Every integration with external LLM providers explicitly sets store=False, meaning your conversations, documents, and queries are never used to improve models or shared with third parties. This commitment is enforced at the code level and applies whether you deploy GiiS on your own infrastructure or use the managed GiiS Cloud service.

Authentication & Access Control

GiiS supports multiple authentication methods to fit your enterprise requirements:

• Basic authentication with email and password
• OAuth2 integration with major identity providers
• OIDC and SAML for enterprise SSO
• SCIM for automated user provisioning and access management

Role-Based Access Control (RBAC) in the Enterprise Edition allows you to gate access to documents, agents, actions, and set usage rate limits per team or user. Document-level permissions can be automatically synchronized from external sources like Google Drive, Salesforce, and others, or assigned manually for fine-grained control.

Encryption: At Rest & In Transit

For GiiS Cloud deployments, all data is encrypted at rest using AES-256 encryption and protected in transit with TLS 1.3. For self-hosted deployments, you maintain full control over encryption configuration and can leverage your infrastructure provider's disk encryption, database encryption, and network security settings.

Self-Hosted vs. GiiS Cloud

Self-Hosted gives you complete operational control: your infrastructure, your security policies, your audit logs. You're responsible for container hardening, network configuration, and database encryption. This model is ideal for organizations with strict data residency requirements or complex compliance needs.

GiiS Cloud is a managed service with built-in compliance tooling (SOC 2, ISO 27001 certifications available), automated security updates, and enterprise features like multi-tenancy, audit logging, and advanced access controls. Data never leaves your tenant, and you receive regular security assessments.

Next Steps

• System Description — Understand GiiS architecture and components
• Access Controls — Learn about authentication and RBAC
• Data Storage — See how data is encrypted and persisted
• Data Flows — Trace how data moves through the system
• Self-Hosted Security — Deployment and infrastructure guidance
• GiiS Cloud Security — Managed service security details

Questions? Get in touch with the GiiS security team.