Skip to content

Security & Trust at Yuma AI

How we secure, process and retain your data — and what our AI does with it. Reports and policies are available through our Trust Center.

  • SOC 2 Type II
  • GDPR
  • CCPA
  • EU-U.S. Data Privacy Framework
Visit our Trust CenterRead our DPA

Compliance

SOC 2 Type II
A SOC 2 Type II report covering the Security Trust Services Criteria, issued by independent auditors Johanson Group LLP. Request the report
EU-U.S. Data Privacy Framework
Yuma AI is certified under the EU-U.S. Data Privacy Framework. See our Privacy Policy
GDPR
Yuma acts as a processor on your behalf, under a Data Processing Agreement. Read our DPA
CCPA
Yuma is a service provider. We never sell or share customer personal data. See our Privacy Policy

AI and your customer data

Does Yuma use customer data to train AI models?

Yuma builds your agent from your own help center content, policies and historical tickets. That content is retrieved at the moment a question is answered, in your workspace only, and never modifies model weights.

Separately, Yuma may use customer data to improve the quality of its AI models. You can opt out at any time.

How we protect your data

  • You own your data

    Yuma cannot resell, share or use your data outside of delivering the service. Contractual, in our DPA.

  • Encrypted in transit and at rest

    Including across Yuma's internal private network.

  • Full audit trail

    Every AI reply and every agent action is logged. You see which resources were used, and why.

  • Access control

    Role-based access control, multi-factor authentication, and Sign in with Google.

Documents & agreements

  • Data Processing Agreement

    Based on the Common Paper DPA Standard Terms. Covers processing, sub-processors, EU SCCs and the UK Addendum, a 72-hour security incident notification, audit rights and deletion at end of contract.

    Read the DPA

  • SOC 2 Type II report

    Security Trust Services Criteria, Johanson Group LLP.

    Visit our Trust Center

  • Penetration test report

    Independent third-party testing.

    Visit our Trust Center

  • Security policies

    Access control, business continuity and disaster recovery, data management, incident response, HR security.

    Visit our Trust Center

  • Sub-processor list

    Every vendor processing customer data.

    View the list

  • Privacy Policy

    How Yuma handles personal data, and our Data Privacy Framework certification.

    Read it

Explore our full Trust Center

Compliance documentation, monitored controls, security policies and sub-processor details — all self-serve. Security and privacy questions: security@yuma.ai. Contractual questions: legal@yuma.ai.

Visit our Trust CenterRead our DPA