Protection without compromise.
At Beautiful.ai, we understand how important security is to you. That’s why we’ve built a robust, multi-layered security framework to protect your data. We adopt best practices and preventative measures to keep your data safe.
Our Philosophy
Our security program is multi-faceted and covers compliance, application security, and infrastructure security, fully complying with SSAE18 SOC2 controls covering Confidentiality, Availability, and Security.
Data Protection
We follow industry standard best practices around data security, compliance, and privacy.
Proactive Defense
Beautiful.ai's evolving practices and annual audits validate your data's safety and compliance.
Artificial Intelligence (AI) Management
Your data remains private. Our AI
sub- processors are barred from using customer data for training.
Going beyond compliance
We know that security is a top priority for many of our customers. Annual SOC2 certification and penetration tests reinforce our security and privacy by design foundation.
CCPA, PCI, SOC 2 Type II, and GDPR
Top-Tier Standards for Data Protection
SOC2 Type 2 Compliance
Adhering to stringent standards for managing customer data. SOC 2 Type 2 compliance verifies the effectiveness of a company's data security controls over time.
Annual Web Application Penetration Testing
Beautiful.ai hires an independent firm that specializes in web application security to test our platform annually.
SAML SSO 2.0 / Google oAuth:
Providing secure, seamless single sign-on access. Read more about it here.
SCIM Provisioning
Automated, secure identity management across applications via SCIM provisioning.
Audit Logs
Keeping comprehensive logs for transparency and accountability.
Analytics
Delivering data insights with strong security controls.
Password Protected Sharing
Ensuring only authorized users access your content.
Roles-Based Permission Tiers:
Enterprise customers can customize access to protect sensitive information.
PCI-DSS Compliant
Meeting Payment Card Industry Data Security Standards by utilizing Stripe.
Encryption
We use robust encryption protocols to protect your sensitive data, ensuring your content remains private and secure at all times. For encryption at rest, AES-256 is utilized. AES-256 is a strong encryption standard that uses a 256-bit key to securely encrypt and decrypt data, providing robust protection against unauthorized access. For encryption in transit, HTTPS 1.3 and 1.2 are supported.
Defending your data
Our security practices continuously evolve to counter new threats. We stay ahead of risks through proactive monitoring and regular updates.
Annual Audits
We undergo regular third-party audits to verify our security measures.
Incident Response Planning
We undergo incident response exercises to test our defensive security processes.
Business Continuity and Disaster Recovery Plan
We’re prepared for the unexpected to ensure continuity.
Cyber Insurance
Providing an extra layer of protection for our users.
Data Deletion on Request
Respecting your privacy and complying with (data subject access right) deletion requests.
Penetration Testing
Conducting annual tests to find and fix vulnerabilities.
Sub-processors List Available
Being transparent about our partners and their roles.
Data Processing Agreement (DPA)
Committing to data protection through enforceable agreements.
Centralized IAM Solution
Efficiently managing employee access to sensitive information.
Artificial Intelligence (AI) Management
Beautiful.ai uses AI to enhance the core product experience, delivering significant value to our users in their everyday work. We prioritize security, reliability, and user-centric design to ensure a safe and dependable experience.
Generative AI Platforms
Beautiful.ai’s generative AI features are powered by business-tier APIs from various top AI platforms. We are committed to notifying our customers if there are any changes in how we process, store, or transmit your data. This is part of our annual SOC2 Type 2 assessment and is validated by our auditors.
Data Processing by Generative AI
Content added directly in the Beautiful.ai platform (e.g., image uploads, text copy/pasting, document embedding, chart creation) is not processed by the generative AI backends. Generative AI integrations can be disabled for your company’s account upon request.
Data Usage for Training Models
Data processed by our AI models will not be used to train public LLM models. These business-grade APIs come with guarantees:
- Data will not train public LLMs.
- Data will be retained for a maximum of 30 days to mitigate against abuse.
Data Security with AI
Beautiful.ai utilizes TLS 1.2/1.3 over HTTPS to transmit data securely between our platform and 3rd party generative AI platforms. These are considered the strongest protocols available today.
Additional Resources
For extra assurance, additional documentation on security and privacy compliance can be provided upon request.
Join over 3 million users who place their trust in Beautiful.ai
