Trustworthy

Guaranteed compliance under Law 21.719 and absolute control over your data lifecycle.

Enterprise-Grade Privacy and Native Law 21.719 Compliance

Snap is built from the ground up to respect strict privacy principles. We comply fully with Chile's new data protection law (Law 21.719), ensuring your organization maintains absolute sovereignty over its information—from automated retention policies to instant ARCO+ rights execution.

Contractual & Legal Certainty (DPA)

We secure compliance through a standardized Data Processing Agreement (DPA) and a Record of Processing Activities (RAT). Your data is processed strictly according to your instructions, using authorized subprocessors under strict legal limits.

Permanent Erasure & Anonymization (ARCO+)

Upon user deletion, we execute a secure, atomic anonymization sequence: replacing identity records, removing access and Slack integrations, and completely purging cognitive AI memory tiers (facts, preferences, session archives) while preserving team collaboration logs.

Automated Retention Purges

We programmatically enforce data minimization: AI agent traces and query histories are automatically purged after 30 days, and operational or email logs after 90 days. We only retain what is legally required.

Client Security Disclosures

How we protect your data and guarantee compliance at every stage of our operation.

Privacy by Design (Architecture)

  • Data Separation: The LLM only processes structural metadata (table schemas, data types) and never sees your raw database rows.
  • Isolated Sandbox: Code generated for data analysis is executed locally inside a secure, locked-down virtual sandbox with zero internet access.
  • Multi-Tenant Isolation: Client datasets are logically segregated at the query layer, preventing unauthorized cross-tenant access.

Pentest & Vulnerability Mitigation

  • Real-Time Query Validation: We inspect and block destructive or unauthorized queries (e.g., SQL injections) before they reach your databases.
  • Read-Only Defaults: Database connections are strictly limited to Read-Only operations at the privilege and transaction levels.
  • OWASP Hardening: Application security is hardened using OWASP standards, DOMPurify sanitization, and secure Content Security Policies (CSP).

Incident Response

  • T+0 Isolation Protocol: In the event of anomaly or suspicious behavior, our systems automatically revoke credentials and isolate containers instantly.
  • Priority Notifications: Directed by our Privacy Officer, we notify affected clients and authorities within 24 hours if sensitive data is exposed.
  • Standards Compliance: Structured incident response workflows align with modern international information security standards.

Logs & Traceability (Data Minimization)

  • Audit Traces: We log the complete logical footprint of the AI agent: user prompts, model reasoning paths, and sandbox details.
  • Automated Data Purging: In accordance with data minimization, analytical traces are permanently and irreversibly purged after 30 days.
  • Total Transparency: Users can view the exact code executed to generate any graphic or numeric result, enabling full auditability.

Access Controls & Session Hardening

  • Secure Authentication: Session tokens (JWT) are stored using HttpOnly, Secure, and SameSite cookies, making them inaccessible to scripts.
  • Token Rotation: Single-use refresh tokens rotate dynamically to prevent session hijacking and limit vulnerability exposure.
  • Domain Gating: Registration is restricted exclusively to authorized corporate email domains.

Insurance & Commercial Guarantee

  • Zero-Write Guarantee: Since we only read structured data for reports, we remove risk by never modifying origin databases.
  • Hardened Encryption: All database connection strings are encrypted at rest using strong symmetric Fernet (AES-128-CBC) schemas.
  • Cyber Liability Insurance: Our services are backed by a comprehensive professional liability and cyber risk insurance policy.

Want to see how it works in your business?

Schedule a call with our technical team. We analyze your sources and show you a live demo of Snap.

Talk to an Expert on WhatsApp

Talk to an expert.

Talk directly to our team. No forms, no waiting.

Direct response to your WhatsApp