Security and control, explained plainly.

Pneum.ai combines isolated assistant compute, scoped connections, encrypted credentials, and human approval controls. This page describes current protections without claiming certifications we have not completed.

Last updated August 30, 2026

A dedicated assistant computer

Each assistant is deployed to its own cloud virtual machine instead of sharing one application runtime with unrelated customer assistants.

Approval before important changes

Connectors separate reads from writes. You can keep write tools disabled or require approval before calendar, file, message, project, record, or device changes.

Scoped connector access

Supported connectors use selected tools and service-specific allowlists for repositories, channels, projects, objects, chats, or devices where available.

Encrypted connector secrets

Saved connector credentials use authenticated AES-256-GCM encryption. They are used by connector adapters and are not returned to the model or browser after save.

How customer content is handled

  • Paid customer content is not used to train shared or general-purpose models unless the customer explicitly opts in.
  • Model, speech, and connected-service providers process the data required to complete the request under the selected configuration.
  • The public demo is connection-local, requests zero-data-retention inference, and erases its in-memory chat state when the connection ends.
Read the full Privacy Policy

Cancellation and deletion

Canceling renewal alone leaves the service available through the paid period. “Cancel and delete account” also schedules every assistant instance and associated resource for termination when that period ends. Already incurred usage remains due.

Read the billing and termination terms

Named service categories

The exact set depends on the cloud, model, voice, and integrations you choose. Optional connected services receive data only when you connect and use them.

Auth0
Account authentication and email verification
Stripe
Checkout, subscriptions, invoices, and payment methods
AWS, Google Cloud, or Microsoft Azure
Selected assistant compute
OpenRouter and selected model providers
Managed model inference
Google reCAPTCHA
Public-form and demo abuse prevention

Current assurance status

PneumAI, LLC does not currently claim SOC 2 or ISO 27001 certification. Independent certification, audit results, and formal response-time commitments will be published here only when they are complete. To report a suspected vulnerability, use the contact form with “Security” in the subject. For privacy requests, email [email protected].

Contact Pneum.ai