Security, without overclaiming.
A short summary of how Guspora.ai handles your data. The full policy lives on the legal page; that is the authoritative version.
Posture
Encrypted in transit and at rest
Browser, API, and inter-service traffic uses TLS. Stored records are encrypted at rest on AWS-managed infrastructure.
Role-based access
Each portal — provider, customer, admin — uses role-based access. Sensitive routes have explicit allow-lists, not allow-by-omission.
Action history kept
When the system or an assistant changes a record on your behalf, the change is recorded with actor, time, and target so it can be reviewed later.
AWS-hosted
Production runs on AWS in us-east-1. AWS holds SOC 2 Type II for its underlying infrastructure; that attribution is to AWS, not to Guspora.
Need the full policy?
For the complete security and privacy policies, read the legal pages. For a procurement or compliance review, send the questions and we will answer with current status.