Skip to content

Security and privacy

Clear about where your data lives and who sees it

This page says how Swiftpilot is run, what you control yourself and how the AI processes your data. We are happy to answer questions about it.

Operation

  • Hosted in Germany

    Swiftpilot runs in data centres in Germany. Your data is backed up regularly, and the backups stay in Germany too.

  • A workspace of its own for every customer

    Every customer gets a workspace of their own with its own database. Your data is kept apart from other customers’ data.

  • Encrypted credentials

    Swiftpilot stores passwords and access to your systems encrypted, with a key of each workspace’s own.

  • Encrypted connections

    Every connection to Swiftpilot is encrypted, in the browser, in the chat on your website and to your systems.

What you control

  • Roles and permissions

    Ready-made roles, or your own built from single permissions. The Pilot can do only what the user may do.

  • Four-eyes principle

    Publishing agents, publishing workflows, changing knowledge: a second person approves if you want, and nobody approves their own request.

  • Audit log

    Changes are recorded with person and time and can be exported.

  • Retention and deletion

    You set after how many days conversations with their summary, contact requests and files are deleted. You can delete single entries at any time.

  • Moderation

    Messages can be checked before or while the answer is written. Suspicious ones are flagged, and senders can be blocked.

  • After the contract ends

    When your contract ends, your data is kept for an agreed time so you can take it back. After that it is deleted.

How the AI processes your data

Answers are written by language models from leading providers, through their interfaces for businesses. For an agent to answer, its instructions, the conversation and the matching extracts from your knowledge go to the model.

Swiftpilot also uses such models to search your knowledge and, when you switch it on, for moderation.

Which providers are involved and which data goes where is set out in the data processing agreement, with the list of every sub-processor.

Common questions about data protection

Where is our data?
In a database of your own for your workspace, in data centres in Germany. The backups stay in Germany too.
Is our data used to train AI models?
No. Swiftpilot uses the AI providers’ interfaces for businesses. Under their terms, data from this use is not used to train their models.
Who on our side sees what?
You decide with roles: who sees or changes conversations, contacts, workflows and settings. Visitors’ contact details are seen only by those allowed to, and the log records who changed what.
How is our database connected?
Read only, and only with the tables and columns you approve. Every query is checked against what you approved, and the connection is encrypted.
Can we export and delete data?
You export conversations and the log at any time. You delete conversations one by one or after a period you set. After the contract ends, your data is deleted after an agreed period.
Is there a data processing agreement?
Yes. Before you start, we sign a data processing agreement under Art. 28 GDPR with you, listing every sub-processor.

Your data protection officer has questions?

We take the time. Send us the questions with your request or by email.

Request a trial