Every layer — from the way we transmit and store your data to the cloud infrastructure we run on — is designed for maximum confidentiality, integrity, and resilience.
End-to-End Protection
TLS Encryption: All traffic between your device and Helios/Horizon uses TLS (HTTPS) to prevent interception.
Encryption at Rest: Sensitive data is encrypted while stored in our systems.
Authenticated Access: Every user’s access is authenticated and scoped by role, ensuring you only see the data you’re authorized to view.
Access & Usage Controls
Role-Based Permissions: Access is limited based on your role and subscription tier.
Rate Limiting: Requests are rate-limited to prevent abuse or unauthorized data extraction.
No Model Training on Your Data: We never train our models on your confidential or proprietary information — including anything you upload, mention in a conversation, or ask.
Security Infrastructure
Built on Google Cloud Platform (GCP): We host all systems on Google Cloud, which is renowned for its robust security protocols, compliance certifications, and infrastructure protection. This ensures that not only our application but also the underlying services and providers we rely on meet the highest security standards.
Gemini Integration Security
Helios also uses Google’s Gemini API within Horizon for some chatbot capabilities. We want to ensure you that Google:
Does not use your prompts, responses, or uploaded content to improve their products.
Processes prompts and responses only in accordance with the Data Processing Addendum for Products Where Google is a Data Processor.
Logs prompts and responses only for a limited period to detect policy violations or meet legal/regulatory disclosure requirements.
May store data transiently or cache it in any country where Google or its agents operate facilities.
Keeps other operational data (account info, billing history, feedback, usage metrics, IP addresses, device identifiers, etc.) subject to Google’s Controller-Controller Data Protection Terms and Google Privacy Policy.
This means your chatbot interactions with Gemini remain private, secure, and handled under strict contractual protections — with no use for AI model training.
Ongoing Security Monitoring
Event Logging: We log security-relevant events and continuously monitor for suspicious activity.
Regular Reviews & Patching: Our team conducts frequent security reviews and applies patches promptly to address vulnerabilities.