Security

• We never sell your data or use it to train AI models.
• When an account or a company is deleted, its chats, knowledge, files and app connections are deleted with it.
• Admins can export everything Guile knows about the company, at any time, as Markdown or JSON.
• Data is stored in the United States.

• Every request is checked against your signed-in company, so one company never reaches another's data.
• Data is encrypted in transit and at rest. Credentials for your connected apps are encrypted a second time.
• Sign-in is passwordless: people use a one-time email code, Google, or a passkey.
• Agent code runs in an isolated sandbox with no internet access unless an admin turns it on.

• Admins choose which AI providers the company uses, and every answer shows which model wrote it.
• Sensitive knowledge can live in restricted spaces that only named people reach, and can require providers that keep no copy of your data.
• Admins cannot read members' private chats.
• Guile only reads your connected apps until an admin turns on changes, and then every change waits for a person to confirm it.
• Every fact Guile learns shows where it came from, and every change can be undone.

• Every change to Guile is reviewed and tested before it ships.
• We check our code and the software it depends on for vulnerabilities continuously.

In October 2026 we completed the Cloud Security Alliance's Consensus Assessments Initiative Questionnaire (CAIQ v4.0.3), which maps our controls against all 17 domains of the CSA Cloud Controls Matrix. It is a self-assessment, not an independent audit, and we will share the full questionnaire with your security team on request.

Guile does not yet hold a third-party certification such as SOC 2 or ISO 27001. We will list each one here once an independent auditor has completed it.

Guile relies on a small number of service providers, each bound by written terms to protect your data and use it only to provide their service. Read how they are used in our privacy overview, and contact us if your security review needs the current list.

If you find a security issue, email hello@goguile.com with “Security” in the subject. Please give us a chance to fix it before sharing it publicly.

If your security team has a questionnaire, contact us and we will answer it.