Purkle8.ai handles sensitive sales content, competitive intelligence, and customer data. We take that responsibility seriously — here is exactly how we protect it.
Security Practices
Encryption in Transit & at Rest
All data transmitted between your browser and Purkle8.ai is encrypted with TLS 1.2+. CRM credentials (HubSpot, Salesforce tokens) are encrypted with AES-256-GCM at the application layer before storage. All infrastructure storage is encrypted at rest by Google Cloud Platform.
Strict Organizational Isolation
Every workspace is fully isolated at the data layer. All queries are scoped to your organization — no data crosses organizational boundaries. A query from one team cannot touch another team's knowledge base, leads, or messages.
Your Data Is Never Used to Train External AI
The content you upload — decks, battlecards, messaging pillars, lead notes — is yours. Customer content is processed only by Purkle8.ai and our approved infrastructure and AI subprocessors, and it is never used to train third-party foundation models. A list of subprocessors is available on request.
Grounded AI — Accurate, On-Brand, Verifiable
Every AI response is grounded in your knowledge base, content library, and messaging pillars first, and stays traceable to your source content. Your content is never shared with other customers or used to train external AI models.
Infrastructure & Access Controls
Purkle8.ai runs on Google Cloud Platform with security headers enforced on every response, CORS restricted to known domains, and rate limiting on all public endpoints. Internal admin access is restricted to named accounts and all API activity is logged.
Availability & Reliability
We design for high availability on enterprise-grade cloud infrastructure with continuous uptime monitoring. Planned maintenance windows are communicated in advance.
Compliance & Certifications
SOC 2 Type II
Purkle8.ai's own SOC 2 Type II certification is in progress and has not yet been issued. Our hosting providers — Replit and Google Cloud Platform — each hold their own SOC 2 Type II certifications covering the infrastructure layer; those certifications apply to the providers, not to Purkle8.ai itself.
GDPR Awareness
We process personal data in accordance with GDPR principles — lawful basis, data minimization, and the right to erasure. EU customers can request a Data Processing Agreement (DPA).
Responsible AI
Responses are grounded in your knowledge base, content library, and messaging pillars — accurate, on-brand, and traceable to your content. Your data is processed only by Purkle8.ai and our approved subprocessors, and never used to train external AI models.
Data Residency
Google Cloud Platform
All Purkle8.ai application data — including your knowledge base, leads, messaging pillars, and AI partner history — is stored and processed on servers hosted on Google Cloud Platform infrastructure.
Our Data Commitments
- We do not sell your data to third parties.
- We do not use your content to train AI models.
- We do not share your data across organizational boundaries.
- You can request deletion of your data at any time by contacting hello@purkle8.ai.