Security at Slaide

This page says how we protect your data in Slaide Cloud, Slaide Hosted (app.getslaide.com), the iPhone, iPad and Android app, and Slaide for Confluence and Jira. Slaide is made by AIVory, Inc. For what we store and why, see the privacy policy.

Report a security problem

Write to [email protected] with “Security” in the subject. We answer within two business days. Please give us the steps to reproduce the problem, and give us time to fix it before you make it public.

Where your data is

• Slaide Cloud runs at app.getslaide.com in data centres of Hetzner Online GmbH in Ashburn, Virginia (USA).
• The database runs on Microsoft Azure in the USA.
• The AI model providers that build a deck are listed in the privacy policy. They receive only the text and images that the deck needs.

Encryption

• All traffic to Slaide Cloud uses TLS 1.2 or higher.
• Data at rest is on encrypted disks.

Access control

• Slaide for Confluence and Jira reads pages and issues as the person who uses it. Slaide sees only what that person can see.
• A deck made from a page or an issue opens only for people who can read that page or issue.
• Every request from the Atlassian app carries a token that Atlassian signs. Slaide Cloud checks the signature before it answers.
• Slaide Hosted and the mobile apps use sign-in through our identity service (auth.aivory.net).
• Only staff who need it for their work have access to production systems and data.

Logs

Request logs do not contain the text of decks, pages, issues or AI chats.

Security incidents

If we find a personal data breach, we tell the affected customers without undue delay and within 72 hours. We then tell them what happened, what data it affects, and what we do about it.

Deletion

We delete your data when you ask, within 30 days. After the end of a service, we delete its data after 30 days, unless law tells us to keep it. See the data processing addendum for the full terms.

Contact

Security: [email protected]. Privacy: [email protected].