Security
How AmeritAI (Norshin LLC) protects your data.
Last updated: August 2, 2026
Security is a foundation of our infrastructure, not a feature-list item. The measures below summarize our approach. No system is completely secure, but we work to protect your data and to notify affected parties where required by law.
Encryption
Data is encrypted in transit using TLS and encrypted at rest by our cloud providers.
Access Controls
We apply least-privilege access, role separation, and authentication (Firebase Auth) so users and staff access only what they need.
Tenant Isolation
Each business's data and knowledge base are logically isolated so one customer cannot access another's data.
Token Security
OAuth access tokens for connected Meta and other integrations are stored securely and can be revoked at any time by disconnecting the integration or via Meta Business Settings.
Trusted Infrastructure
The Service runs on reputable providers including Google Cloud / Firebase and Vercel, which maintain their own industry security certifications.
Monitoring & Logging
We keep application and access logs to detect, investigate, and respond to security-relevant events.
Payment Security
Payments are processed by Stripe. We do not store full payment card numbers.
Subprocessors
A current list of the third-party processors we use is available at ameritai.com/subprocessors.
Responsible Disclosure
If you discover a security vulnerability, please report it to privacy@ameritai.com. We review reports and handle them responsibly.