Security and privacy

Articles in Security and privacy

• How does Pinevon keep my data secure?Access is authenticated and authorized on the server, database access is protected by row-level security, private files use signed links, and secrets stay on the server. See Security & data for details.
• Is my data shared between businesses in GorZesk?No. Each business’s data is isolated by an API-layer authorization check on every request; GorZesk’s backend connects to its database in a way the tables’ row-level security policies do not restrict, so that check is the real protection.
• Does Pinevon hold SOC 2 or ISO 27001 certification?No. Pinevon and GorZesk are early-stage and do not hold those certifications, and we will not claim them until they exist.
• Which AI providers process my questions?GorZesk and the Pinevon assistant send only what is needed to generate a reply to configured AI providers. The Privacy Policy and Subprocessors list name them.
• Does the AI learn from my business data?Pinevon does not train its own models on your data. Providers’ own terms apply to what is sent to them; see the Privacy Policy and Subprocessors list.
• How do I report a security vulnerability?Email security@pinevon.com or use Report an issue in the Trust Center. Please share details privately and give us time to fix before disclosure.
• How do I exercise my privacy rights?Email privacy@pinevon.com to ask for access, correction or deletion. You can also export or delete your account data from Settings.
• What cookies does Pinevon use?See the Cookie Policy in the Legal Center for the cookies and similar storage used and why.
• Are uploads scanned?Uploads are validated on size, declared type and real file contents. Contact-form attachments also pass a safety screen and are stored privately.
• Where is my data stored?In our database and storage providers listed in the Subprocessors document. Exact regions are shown there where known.
• Are backups made?Yes, Pinevon takes automated daily backups with retention and failure alerts. A restore has been rehearsed against backup data.
• How does Pinevon handle AI safety?The AI answers from your data, hands the conversation to your team when the records do not support an answer, and its suggestions wait for human approval. See Responsible AI in the Trust Center.

Not here? Ask the team and a person will follow up, usually within one to two business days.