Purkle8.ai handles sensitive sales content, competitive intelligence, and customer data. We take that responsibility seriously — here is exactly how we protect it.
Security Practices
Encryption in Transit & at Rest
All data transmitted between your browser and Purkle8.ai is encrypted with TLS 1.2+. CRM credentials (HubSpot, Salesforce tokens) are encrypted with AES-256-GCM at the application layer before storage. All infrastructure storage is encrypted at rest by Google Cloud Platform.
Strict Organizational Isolation
Every workspace is fully isolated at the data layer. All queries are scoped to your organization — no data crosses organizational boundaries. A query from one team cannot touch another team's knowledge base, leads, or messages.
Your Data Is Never Used to Train External AI
The content you upload — decks, battlecards, messaging pillars, lead notes — is yours. We do not use it to train third-party AI models, fine-tune foundation models, or share it with any external party. All AI processing occurs through Replit's secure AI Integration proxy.
Grounded AI — Accurate, On-Brand, Verifiable
Every AI response is grounded in your knowledge base, content library, and messaging pillars first. Your proprietary content never leaves our platform.
Infrastructure & Access Controls
Purkle8.ai runs on Google Cloud Platform with security headers enforced on every response, CORS restricted to known domains, and rate limiting on all public endpoints. Internal admin access is restricted to named accounts and all API activity is logged.
Availability & Reliability
We design for high availability on enterprise-grade cloud infrastructure with continuous uptime monitoring. Planned maintenance windows are communicated in advance.
Compliance & Certifications
SOC 2 Type II
Purkle8.ai is hosted on Replit and Google Cloud Platform, both of which hold SOC 2 Type II certification. Our infrastructure inherits these controls — covering security, availability, and confidentiality.
GDPR Awareness
We process personal data in accordance with GDPR principles — lawful basis, data minimization, and the right to erasure. EU customers can request a Data Processing Agreement (DPA).
Responsible AI
Responses are grounded in your knowledge base, content library, and messaging pillars — accurate, on-brand, and traceable to your content. Your proprietary data never leaves the platform.
Data Residency
Google Cloud Platform
All Purkle8.ai application data — including your knowledge base, leads, messaging pillars, and AI partner history — is stored and processed on servers hosted on Google Cloud Platform infrastructure.
Our Data Commitments
- We do not sell your data to third parties.
- We do not use your content to train AI models.
- We do not share your data across organizational boundaries.
- You can request deletion of your data at any time by contacting hello@purkle8.ai.