La sécurité chez Fiko.
Nous avons pris la souveraineté des données au sérieux dès le premier jour — non comme une case à cocher pour la conformité, mais comme une décision produit.
Votre PI reste confidentielle. Tout le reste avance vite.
Nous avons établi une distinction délibérée entre deux types d'informations et les traitons de manière totalement différente.
AI publique — pour la rapidité
Conversations clients
"I want to return this product." Translating that sentence from Vietnamese to English is not sensitive. We use the best public AI available for this — fast, accurate, and constantly improving.
AI privée — pour votre PI
Vos connaissances internes
Your product documentation, pricing logic, API specifications, developer notes, internal policies. This is your competitive advantage. It runs on a private AI that never shares data outside your account.
The separation is built into the architecture, not a settings toggle. Your confidential knowledge is processed in a logically isolated environment, scoped to your account, with access controls designed to keep it out of reach of other companies, other AI systems, or anyone outside your organization.
Isolation multi-tenant.
Chaque entreprise sur Fiko dispose d'un environnement totalement isolé.
- Separate database records with company-scoped queries enforced at the application layer
- Separate vector store namespace — per-tenant isolation at the database level
- Separate AI knowledge base — Company A's AI suggestions are trained exclusively on Company A's data
- Architectural design: company-scoped queries and per-tenant vector namespaces are built to prevent one company's knowledge base from influencing another company's AI suggestions
Infrastructure.
- Hosted on major cloud infrastructure in us-east-1 region
- All data encrypted at rest and in transit
- HTTPS enforced on all connections
- Object storage with server-side encryption for all media and files
- Secrets managed via cloud secret store — no sensitive configuration in plain text
- Container images scanned for vulnerabilities on every push
RGPD.
- Live chat widget built with GDPR requirements in mind — cookie consent integration respects the host site's settings
- Data retention configurable per company
- Data export and deletion available on request
- Singapore PDPA: Data Protection Officer appointed, see our Privacy Policy for details
Des questions sur la sécurité ?
Contact us at [email protected] or use the formulaire de contact.