Back to home

Trust, safety, and compliance

Daisy protects your data and aligns with international security standards.

Security & privacy

🔐

TLS & encryption at rest

TLS in transit; encryption at rest in Azure West US 2. Not end-to-end encrypted.

📁

Data minimization

We only store what is necessary

🧠

AI safety guardrails

Protection against toxic and unsafe outputs

👤

Privacy-by-design architecture

Privacy built into the architecture

🧾

GDPR alignment

Right to erasure and data export

🚫

No human access to chats

Conversations are not read by staff

📊

De-identified analytics

Analysis only in de-identified form

⏳

Retention & memory controls

Account data kept while active + 30 days; memory items auto-expire by TTL

🧩

Secure training pipeline

No leakage of user data

🧑‍⚕️

Not a medical device

Does not replace clinical therapy

Regional law

  • 🇰🇿Law of Kazakhstan on personal data — protection and storage of users’ data in Kazakhstan
  • 🇷🇺152-FZ on personal data (Russia) — localization and processing of personal information
  • 🇺🇿Law on personal data (Uzbekistan) — consent and right to erasure
  • 🇰🇬Law of Kyrgyzstan on personal information — security of user data
  • 🌍Regional data residency — option to host data in the user’s country

Compliance standards

🇪🇺 GDPR alignment🛡 SOC 2 Type II principles🧠 AI safety rules (OECD / EU AI Act)🚫 No sharing with third parties