🔒 Security & trust
Built for production. Private by default.
Kit for AI is the memory layer for your AI — and your data is handled with enterprise-grade care: encrypted, isolated, and never anyone's training set.
Private by default
Your data is yours — never a training set, never resold to anyone.
Encrypted at rest
Stored files and sensitive credentials are encrypted at rest.
Isolated infrastructure
Runs on dedicated, isolated infrastructure — no shared tenancy.
Scoped API keys
Keys are hashed, per-key rate-limited, and revocable at any time.
Project isolation
Spaces keep each project's knowledge separate — no cross-over.
Delete means gone
Remove data and it's gone for good — no shadow copies.
How we handle your data
- TLS everywhere with HSTS preloading and always-use-HTTPS.
- A strict Content-Security-Policy plus X-Frame-Options, nosniff, and a locked-down permissions policy.
- Payments handled by our PCI-compliant provider — card data never touches our servers.
- Rate limiting and abuse controls on every public endpoint.
- Least-privilege access to production, with audit logging of admin actions.
- GDPR-aligned data handling — export or delete your data on request.
Verify it yourself
Don't take our word for it — run these independent checks against our live site.
Report a vulnerability
Found something? We appreciate responsible disclosure. Email [email protected] and we'll get back to you quickly.
Start free