Data retention policy
Spekit, Inc. is committed towards being a socially responsible company and desires to comply with local laws pertaining to data protection. Personal data can be processed only for the purpose that was defined before the data was collected. Subsequent changes to the purpose are restricted to a very small limit and require substantiation.
Data archiving and removal policy
Personal data that is no longer required after the expiry of legal or business process related periods must be deleted. There may be an indication of interest that merits protection OR historical significance of data in individual cases. If so, the data must remain on file until the interests that merit protection have been clarified legally, or the corporate archive has determined the data must be retained for historical purposes.
Data storage policy
Personal data is subject to data secrecy. It must be treated as confidential on a personal level and secured with liable organizational and technical measures to prevent unauthorized access, illegal processing or distribution, as well as accidental loss, modification or destruction. All data is encrypted both during transit and at rest.
Data center location(s)
United States
Data hosting details
Cloud hosted
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Google Gemini, with OpenAI (GPT-4-class) available as an alternate and fallback
LLM retention settings
Spekit stores chat Q&A for analytics, and keeps temp logs (Arize, Sentry) to troubleshoot. You own your data; we purge it within 30 days of request. LLM prompts include only the question, history, and approved content and never used to train models.
LLM data tenancy policy
Multi-tenant, isolated by company_id; queries are company-scoped and RAG enforces permissions. No cross-customer exposure or non-prod replication. Pinecone embeddings are tenant-tagged, not dedicated. LLM calls run server-side via Spekit accounts.
LLM data residency policy
All Personal Information (PI) is stored in the U.S. Spekit's infrastructure is hosted in the United States and customer data remains in region. LLM vendor calls are server-side from Spekit's AWS backend over TLS 1.2+; data at rest is AES-256 encrypted.