Trust Center
Trust is earned by being specific.
This is how Pinevon handles security, privacy and AI. Every claim is one we can point to in the product, and what we do not have is stated plainly.
Explore
Everything in one place
Security and data
Authentication, authorization, encryption, storage, backups and how your data is separated.
ReadResponsible AI
Human oversight, data boundaries and honest limits for the AI in Pinevon and GorZesk.
ReadReport an issue
A product problem or a security vulnerability: where to send each.
ReadSupport
Search the help center, open a ticket or contact the team.
ReadPrivacy Policy
What we collect, why, who receives it, how long we keep it and your choices.
ReadTerms of Service
The rules for using Pinevon and GorZesk.
Read
Our approach
Six things we commit to
Security, privacy and honest communication are product requirements, not marketing.
- 01
Security by default
Access is denied unless something allows it, and checked on the server.
- 02
Privacy by design
We collect what we need, keep it as long as needed and explain both.
- 03
Responsible AI
Grounded answers, human approval and honest limits.
- 04
Reliability
Automated backups, provider fallbacks and alerts when something fails.
- 05
Transparency
We say what we do, what we do not do and what we have not verified.
- 06
Reporting
A private route for security reports, and a person reads them.
What we do not claim
Things we do not have
Pinevon and GorZesk are early-stage. We will not imply any of these until they are real.
- SOC 2 or ISO 27001 certification or audit
- HIPAA compliance or any healthcare regulatory certification
- PCI DSS compliance (Pinevon does not handle card numbers; payment providers do)
- GDPR “certification” (there is none); we describe our practices in the Privacy Policy and DPA instead
- An independent third-party penetration test
- End-to-end encryption
- A formal, published incident-response programme or uptime guarantee (we do not publish uptime statistics)