Your data stays yours: nothing, no one, never.
Your data is becoming your most valuable asset. AI can learn from almost anything public; it can't learn your customers, decisions and results unless someone hands them over. So nothing reaches an outside AI model without your written approval, no one outside the named principals sees it, and it is never used for another client. The commitments below come from our Information Security Policy, version 1.0, effective October 1, 2026.
Encrypted twice at rest
Each client gets its own vault, on full-disk-encrypted hardware Bullsai owns.
No third-party model without your sign-off
Record-level data enters an outside AI model only if you authorize a named provider in writing. No training on your data.
Checked before anything leaves
An automated identifier check and a principal's review clear every result. No statistic describes fewer than 10 records.
Principals only
Contractors build against synthetic data and never see client data, systems or keys.
24-hour notice
You hear from us within 24 hours of a suspected incident involving your data.
Provably destroyed
Cryptographic erase within 30 days of close, with a signed certificate (NIST SP 800-88 Rev. 2).
