1.Our Commitment
Security is foundational to Human AI. Because our Services can command machines in the physical world, we design every layer around zero-trust principles, least privilege and defense in depth.
2.Data Protection
Customer data is encrypted in transit and at rest using industry-standard methods. Access to production data is limited to authorized personnel with a business need.
3.Identity and Access
The Services support single sign-on, multi-factor authentication and role-based access controls. Internally, access is granted on a least-privilege basis and reviewed regularly.
4.Secure Development
We follow secure development practices, including code review, dependency management and testing before release. Safety-relevant changes receive additional review.
5.Monitoring and Incident Response
We monitor the Services around the clock to detect suspicious activity. Documented incident response procedures guide how we investigate, contain and recover from incidents, and we notify affected customers as required by law and our agreements.
6.Resilience
Our infrastructure is designed for availability, with redundancy, backups and recovery procedures to help keep the Services running and data protected.
7.Responsible Disclosure
We welcome reports from security researchers. If you believe you have found a vulnerability, please email legal@humanai.app with details. Please do not access or modify data that is not yours, disrupt the Services or publicly disclose the issue before we have had a reasonable opportunity to address it.
We will acknowledge valid reports promptly and keep you informed as we investigate.
8.Contact
Security questions and documentation requests from customers can be sent to legal@humanai.app. Privacy questions can be sent to privacy@humanai.app.