Clear safeguards. Straight answers. Your business in control.
Your customers' trust matters, and so does knowing how their information is handled. Sum Vivas takes data protection, security and responsible AI seriously, with clear controls over what your Digital Assistant can access, say and do. We explain how your information is managed, what safeguards are in place and where further assessment may be needed. No vague promises, just straightforward answers to help you make informed decisions with confidence.
Your business protected. Your customers' information respected.
Security and responsible AI are built into how we deliver our Digital Assistants. From keeping customer information separate and protecting connected systems to monitoring software and maintaining backups, we use defined safeguards to help protect your business and the people who trust it.
1. Your information stays separate
Your business data. Your own protected environment.
Each customer has a separate operating environment, with dedicated software, databases, storage and encryption keys. Network security controls restrict access between client environments, helping keep your information protected and separate from other businesses.
2. Every message goes where it belongs
The right conversation. The right business.
Customer messages are directed to the business and service they're intended for. If a message cannot be reliably identified, it is held and flagged for review rather than being passed to the wrong organisation.
3. Secure connections to your systems
Your connected accounts and access details protected.
When your Digital Assistant connects with services such as Gmail, Outlook, Meta or Zendesk, the account credentials are encrypted using a dedicated key for your organisation before being stored. This helps protect access to the systems your business relies on.
4. UK-based data storage
Know where your information is stored and processed.
Your service data is stored using Amazon Web Services in London, UK. Where additional providers, including AI models, may process information outside the UK, we'll explain those arrangements so you can understand and assess how your data is handled.
5. Tested before release
Carefully managed updates. Ongoing security checks.
Software updates go through testing before they're introduced into your live service. Releases are also checked for known security vulnerabilities before deployment, with further scans carried out weekly to help identify issues requiring attention.
6. Backups you can rely on
Protecting your information is part of everyday operations.
Your service data is backed up nightly using two independent methods. Automated checks monitor backup completion and flag missing or outdated copies, helping us identify and address issues promptly.
7. Responsible AI with clear boundaries
Helpful conversations. Agreed rules. Human oversight.
Your Digital Assistant works within approved business information, permissions and operating rules. You can also enable an AI disclosure notice that visitors acknowledge before starting a conversation. When a request needs human attention or falls outside agreed boundaries, the Assistant follows the appropriate guidance or handover process.
8. Continuous improvement in security assurance
Clear about our standards. Open about our progress.
We have mapped our security controls against SOC 2 requirements and use automated checks to support ongoing assessment. We are working towards independent assurance and will explain our current position, existing controls and areas still being developed. We do not claim to hold a SOC 2 attestation report.
For the public
Know who you're speaking to. Know what to expect.
When you interact with a Sum Vivas Digital Assistant on a website, phone, messaging service or interactive screen, you're speaking with AI on behalf of that organisation, not a person.
The Assistant uses information approved by the organisation and follows agreed rules to answer questions, provide guidance and help with everyday requests. If you need personal assistance, you can ask to be directed to the organisation's team.
Only share personal information when it's necessary for your enquiry and avoid sharing sensitive details unless you're using an appropriate, approved process. The organisation's privacy notice explains how your information and conversations are handled.
Your security questions deserve clear answers.
We understand how important security, data protection and responsible AI are to your business. Send us your security questionnaire and we'll provide clear, straightforward answers, explain the safeguards we have in place and share supporting evidence where appropriate. If something requires further assessment or development, we'll be open about it, giving you the information you need to make an informed decision.