Security

Security at Fiko.

We took data sovereignty seriously from day one — not as a compliance checkbox but as a product decision.

Your IP stays private. Everything else moves fast.

We made a deliberate distinction between two types of information and treat them completely differently.

Public AI — for speed

Customer conversations

"I want to return this product." Translating that sentence from Vietnamese to English is not sensitive. We use the best public AI available for this — fast, accurate, and constantly improving.

Private AI — for your IP

Your internal knowledge

Your product documentation, pricing logic, API specifications, developer notes, internal policies. This is your competitive advantage. It runs on a private AI that never shares data outside your account.

The separation is built into the architecture, not a settings toggle. Your confidential knowledge is processed in a fully isolated environment — it cannot be seen by other companies, other AI systems, or anyone else.

Multi-tenant isolation.

Every company on Fiko has a completely isolated environment.

Separate database records with company-scoped queries enforced at the application layer
Separate vector store namespace — per-tenant isolation at the database level
Separate AI knowledge base — Company A's AI suggestions are trained exclusively on Company A's data
Architectural guarantee: it is impossible for one company's knowledge base to influence another company's AI suggestions

Infrastructure.

Hosted on major cloud infrastructure in us-east-1 region
All data encrypted at rest and in transit
HTTPS enforced on all connections
Object storage with server-side encryption for all media and files
Secrets managed via cloud secret store — no sensitive configuration in plain text
Container images scanned for vulnerabilities on every push

GDPR.

Website live chat widget is GDPR-compliant
Cookie consent integration available
Data retention configurable per company
Data export and deletion available on request