How your data is handled.
Plain, checkable answers about where your information goes when I build or run a workflow for you. If something here doesn't answer your question, email me and I'll explain.
Last updated November 6, 2026
Where your systems run
- Google Cloud and Google Workspace. Workflows run on Google Cloud, and documents and email use Google Workspace. Both are covered by signed business associate agreements with Google. A business associate agreement is the contract the HIPAA privacy rules require before a provider handles health information.
- Database. Structured data is stored in a Neon Postgres database with HIPAA mode turned on. Neon encrypts stored data with AES-256 and requires encrypted connections (Neon security overview).
- This website. The public website is hosted separately and never stores client data.
AI models
- For client work, I use Google's business AI service (Vertex AI). Google commits in its service terms not to use your data to train or fine-tune any AI models without your permission (Google Cloud documentation).
- Google runs automated safety checks on AI requests. If a request is flagged, Google may keep a record of it for up to 90 days to look into possible misuse. That record is not used to train models. I don't claim zero data retention by the AI provider.
Who can access your data
- At Gyasi Automations, I'm the only person with administrator access to the systems that handle client data.
- Each client's data is kept separate from every other client's.
- When a workflow connects to one of your accounts, such as a shared folder, access is limited to what it needs. You can revoke it at any time.
People stay in control
- AI prepares drafts and organizes information. Important work waits for a person on your team to review, edit and approve it before it's used or sent.
- Numbers, dates and rules are checked by plain code, not by AI. Anything that doesn't match is flagged for a person.
- Each step a workflow takes is logged, so there's a record of what happened and who approved it.
How long data is kept
Your data is kept only as long as it takes to complete the work you asked for. After that, or any time you ask, it's deleted from my systems. When finished work is delivered through a download link, the link stays available for 48 hours. After that, the delivered copies and the working data used to produce them are deleted, so please save the files where you keep your records. Finished work you have saved belongs to you and stays wherever you keep it. Backup copies held by my service providers expire on their own schedules.
What I don't claim
I would rather be clear than impressive. Gyasi Automations has not completed a SOC 2 or similar independent audit. There is no official "HIPAA certified" status, and I don't claim one. AI can make mistakes, which is why every system includes human review. You remain responsible for decisions made with the work my systems prepare.
Questions or requests
To ask a question, request a copy of your data or ask for deletion, email admin@gyasiautomations.com. See also the privacy policy and terms.