Trust & security
Your data and site access, handled honestly.
Eli measures AI answers and can prepare work for your website, so you should know exactly how your data and connections are used. This page states only what is true today. If a claim is not here, we do not make it.
Where your data lives
Hosted in the European Union
Your data is stored and processed on infrastructure in the EU (Frankfurt), subject to EU law. For European businesses that removes a common procurement objection: you are not sending customer data outside the EU to use Eli.
Data minimization and controls
We collect the data needed to do the work: your site, what AI says about it, and the outcomes you choose to track. We sign a Data Processing Agreement on request. You can export or delete your workspace data at any time.
No personal-visitor tracking
Our site tag never stores a raw IP or personal identifier. It records a salted daily hash so repeat visits are not linked across days, and reports only aggregate AI-referred visits plus visits to conversion pages you configure. Those page visits are directional and are never called revenue.
How your data is protected
Isolated per customer
Database row-level security scopes every protected table to your workspace. Customer isolation is enforced in the database rather than relying only on application checks.
Connections are encrypted
When you connect a site or search service, credentials are encrypted with AES-256-GCM before storage and decrypted only in memory to do the work. Stored values are ciphertext rather than plaintext credentials.
Access you control
Every connection uses a key you create and can revoke: a WordPress application password, a read-only Search Console user, a Bing API key, or a Slack webhook. Revoking it removes Eli's future access. We ask for the least access that does the job, and read-only access wherever possible.
Third-party sends stay human
Eli may apply bounded changes to a site connection you explicitly own. Anything sent to another site or person stays a one-click human action. The engine drafts; a human makes the final send. That is a safety boundary, not just a feature.
How we handle AI SEO honestly
We measure, we do not invent
Every number in your dashboard comes from something we actually observed: real AI answers, your own console data, real visits. Where we estimate, we label it an estimate and show the assumption. We never present a modeled number as measured revenue.
Policy-aligned safeguards
The AI SEO work we prepare is designed around search and AI platform rules: honest comparisons, a visible methodology, real sources and hard volume caps. We refuse tactics that could put your search presence at risk.
Certifications and roadmap
SOC 2: on the roadmap
We are not yet SOC 2 certified and we will not claim otherwise. If you are evaluating Eli for a security review, contact us and we will share our current security posture in detail and our timeline. We begin the formal process when a customer's security review calls for it.
Single sign-on
Google sign-in is available today. SSO/SAML for teams is available on request as you scale.
Status
Live service status is at /status. If something is degraded, you will see it there.
Have a security question or need a DPA? security@hireeli.io
See live service status