Our Security Principles
Security is not a feature added after the product is built—it is one of the foundations on which Red Hills Operations is designed.
Every decision we make is guided by one simple objective:
Your business should benefit from artificial intelligence without sacrificing privacy, security, or control.
Security by Design
Security considerations are incorporated into platform architecture, application design, and feature development from the beginning rather than being treated as an afterthought.
Your Data Belongs to You
Your business information remains your property.
- We do not sell customer data.
- We do not monetize private business information.
- We do not use your private data to train public AI models.
- You control the information you provide.
Tenant Isolation
Every customer operates within an isolated environment designed to prevent unauthorized access between businesses.
AI employees only access the information belonging to the business to which they have been assigned.
Secure Hybrid Intelligence
The owner-playground Knowledge pilot sends only bounded excerpts from an eligible AI employee's assigned indexed private Knowledge to the approved AI provider. The complete answer and supporting citations are validated before delivery.
Private business data is never exposed to public web search, shared with other customers, sold, or used for advertising. When required to deliver customer-enabled AI capabilities, limited customer content may be securely processed by approved AI infrastructure providers operating under applicable contractual, technical, and privacy safeguards.
Application-controlled logs are designed to exclude document text, search queries, embeddings, vectors, and provider payloads. Approved providers may retain separate technical telemetry under their controlled terms, so Red Hills Operations does not make an unverified zero-retention or Zero Data Retention promise. Public-web search, external tools, and actions are unavailable in this pilot.
Least Privilege
Every user, AI employee, API integration, and connected service receives only the permissions necessary to perform its assigned work.
Transparency
Customers should understand what AI is doing, what information it is using, and what systems it can access. We believe transparency builds trust.
Human Oversight
AI assists people—it does not replace accountability.
Businesses determine approval workflows, escalation paths, and review processes appropriate for their operations.
Continuous Improvement
Security threats evolve continuously. We regularly review our architecture, controls, and operational practices to strengthen the platform over time.
Our Commitment
We believe businesses should never have to choose between powerful AI and responsible security. Our mission is to deliver both.
Questions?
If you have questions about our security practices or would like to discuss your organization's requirements, we'd love to hear from you.