Trust Center

Mosaic AI is accessible to teams via a browser-based AI assistant. The platform extends to your customers through a powerful Help Center product and rich set of RAG APIs that improve self-service and access to knowledge.

Security

Indexing controls

Filter and restrict granular data directly at every source - down to individual fields. Mosaic AI doesn’t touch the rest.

Automatic PII redaction

Leading AI models automatically redact your Personally Identifiable Information (PII) from a number of data sources whenever possible.

Secure encryption at every step

All data is encrypted using industry-leading standards - in transit at TLS 1.2/1.3 and at rest in AES 256-bit encryption.

Logical separation

Your data is logically separated into a dedicated tenant within Mosaic AI. No tenant’s data ever becomes accessible to another customer.

User authentication and permissions

All users are required to authenticate access to Mosaic AI via existing SSO solutions. Mosaic AI can also match existing access controls for most user permissions in your tech stack.

Secure cloud environment

All processing of data is completed in Mosaic AI’s secure cloud environment. No customer data is ever shared with any third party vendor or used to train any LLM models.

Best in class monitoring

Software Security

  • Code Review Processes
  • Employee Disclosure Processes
  • Firewalls
  • Quarterly Vulnerability Scans
  • Regular Penetration Tests
  • Responsible Disclosure (Bug Bounty)
  • Vulnerability Management

Data Security

  • Daily Database Backups
  • Encryption at REST
  • Security Policy
  • SSL/TLS Enforced
  • System Access Control Policy

Network Security

  • Denial of Public SSH
  • Firewalls
  • Logging/Monitoring
  • Malware Detection Software
  • Unique Accounts Used

Organization Security

  • Acceptable Use Policy
  • Code of Conduct
  • Disaster Recovery Plan
  • Incident Response Plan
  • Incident Response Team
  • Security Training

Product and User Security

  • Hard-Disk Encryption
  • MFA on Accounts
  • Session Lock
  • Terms of Service

Infrastructure Security

  • Automatic Security Patches
  • Enterprise-Grade Cloud Data Storage
  • Multiple Availability Zones
  • Password Policy

Compliance

Documentation of our compliance against global standards including certifications, attestations, and audit reports.

SOC 2 Type II
GDPR
ISO27001
HIPAA

Subprocessors

Mosaic AI works with industry-leading partners to provide our products, services, and communications with you.

Google Cloud
E2B
AWS
Microsoft Azure
Frontegg

Frequently asked questions

Will AI publish content to our knowledge base without us approving it?

No. Knowledge drafts and your experts decide. Every article is sent to a subject matter expert who can verify the sources, edit the content, approve it, keep it internal, or archive it. Nothing reaches customers without your team's approval, and you control which systems Knowledge is allowed to draft from in the first place.

How can I learn more about Mosaic AI’s policies?

All documents available upon request. Please reach out to inquire about Mosaic AI’s Responsible AI practices. Available documents include:

  • AI internal use policy
  • Risk assessment policy
  • Physical security policy
  • Vulnerability management policy
  • Human resource security policy
  • System access control policy
  • Software development life cycle policy
  • Incident response plan

What is Mosaic AI and what does it do for organizations?

Mosaic AI is an enterprise AI platform designed to transform how organizations serve their customers and equip their employees. It provides AI-first solutions that improve customer experiences through rep interactions, in-product, and any digital touchpoint. The platform features a comprehensive knowledge management system, enterprise search with more than 100 integrations, AI workflows, no-code apps, AI support ticket enrichment and advanced analytics.

Where can I find Mosaic AI's privacy policy?

Mosaic AI collects employee and customer-supplied personally identifiable information in order to provide our services to our customers. We do not collect credit card information or personal health information at any time as part of our service. You can read our privacy policy here.