Security
For IT, security and procurement teams reviewing Fig1 AI.
Where your data lives, how long we keep it, which AI models see it, and the agreements behind it.
Your content, knowledge base and conversations are stored in the United States.
Data is encrypted in transit with TLS, and encrypted at rest by our database, storage and hosting providers.
Chat conversations, on Brand Agents and Pages, are deleted automatically 60 days after they were last active. Analytics events and form submissions are kept for 90 days.
When your agreement ends, we return or delete your data within 60 days.
Answers come from Claude by Anthropic and GPT by OpenAI, through their business APIs.
OpenAI and Anthropic do not train on data sent through their business APIs, and we have opted out of model training with every other AI service we use.
We instruct OpenAI not to store responses. Its abuse-monitoring logs are kept for up to 30 days.
Anthropic deletes inputs and outputs within 30 days, unless content is flagged for a usage policy violation.
Conversations stay private to your account, and personal details such as emails and phone numbers are redacted from analytics and exports.
Owners, admins and members, with team members limited to the sites you give them.
Every action FigBot takes on your agents is recorded, so you can roll it back.
Everything a security or procurement review usually asks for, in one place.
Data Processing Addendum
Fig1 AI acts as your processor. Includes the EU Standard Contractual Clauses, breach notification and our security measures.
Subprocessors
Every company that processes data for us, what it does and where. We give notice before adding a new one.
Software Services Agreement
Our standard customer agreement.
Privacy Policy
How we handle personal information.
Privacy requests
Ask us to access, export or delete personal data.
Send it to our team and we will answer it, along with our DPA and subprocessor list.