AANTC
Home

Trust

Security

Aantic AI is used on planning data that businesses treat as confidential. This page summarizes how we handle that data. Every customer engagement, including pilots, is also covered by a signed NDA, Master Services Agreement (MSA), and Data Processing Agreement (DPA). Where this page and a signed agreement differ, the agreement governs.

Last updated September 22, 2026

1Protecting your data

  • Encryption. Data is encrypted in transit and at rest.
  • Hosting. The platform runs on Cloudflare Workers, Supabase and Railway, with data stored in the United States.
  • Least-privilege access. Access to production systems is limited to staff who need it, and every staff account with production access requires multi-factor authentication.
  • Workspace isolation. Workspaces are logically separated so each customer's data is isolated from other customers' data.

2How your data gets into Aantic

We agree the file transfer method with each customer during onboarding and set it out in your agreement. Whichever method you choose, only staff working on your engagement handle your files, and they are loaded into storage reserved for your workspace.

3AI and your data

The platform uses large language models from Anthropic and Google to interpret queries and produce analysis. Relevant Customer Data is sent to these providers for processing, and the result comes back to your workspace.

  • We do not train AI models on Customer Data. Our model providers are contractually barred from training on it. Each provider is bound by written terms, may use data only to provide services to us, and receives only what that service requires.
  • AI output is decision support. Model output can be wrong. It is meant to be reviewed by a person before you act on it.

4Who controls what

What customers put into the platform — uploaded files, queries, and the results generated from them — is Customer Data. We handle it only on the customer's instructions, as set out in the MSA and DPA. Our Privacy Policy explains this in full.

5What your agreements cover

Each customer's signed agreements set out how we notify you of a security incident, how long we keep Customer Data and how it is deleted when the engagement ends, and which subprocessors we use. We're happy to share these documents during your evaluation.

6Security questions and reports

For a security review, a questionnaire, or copies of our agreements, email support@aantic.ai.

To report a possible vulnerability, email support@aantic.ai with "Security report" in the subject line. We acknowledge reports within one business day. We will not pursue legal action against anyone who reports a vulnerability in good faith, avoids accessing other customers' data, and gives us reasonable time to fix the issue before disclosing it.