Security and privacy
How Ground protects the data you bring and the data it generates. For questionnaires, a DPA, a BAA or our subprocessor list, email support@ground.dev.
- Encryption
- TLS on every connection. Files, database and backups encrypted at rest by our providers. Credentials for your delivery buckets are additionally AES-256-GCM encrypted.
- Uploads
- Sent from your browser straight to encrypted storage with short-lived signed links; nothing passes through the web app. Imports from links refuse private network addresses.
- Personal data
- Names, emails, phones, IDs, card numbers, addresses and similar columns are detected and replaced with fake values, never modeled. Free text is scrubbed before Claude sees any example.
- No copies of real records
- Every source row is fingerprinted, and generated rows that would reproduce a rare real record are redrawn. Rare categories are never emitted.
- Measured privacy
- Each dataset's report runs membership-inference, attribute-inference and singling-out attacks against the synthetic data and shows the results.
- Differential privacy
- Optional (ε, δ)-differential privacy for a dataset, with the budget accounted per statistic in the report.
- Access control
- Organizations with owner, admin and member roles; datasets are private unless shared with an organization. Two-factor authentication, which organizations can require. Single sign-on through OIDC or SAML, only after DNS verification of the email domain.
- API keys
- Stored as SHA-256 hashes, optionally expiring, revocable, and unable to manage keys, buckets or accounts.
- Audit log
- Uploads, exports, downloads, sharing, member and security changes are recorded with IP and browser. Members see their own; organization admins see their organization's. Kept for a year.
- Retention and deletion
- Raw uploads, and the copies of their rows made for training, are deleted after 30 days by default or on request. A deleted dataset stays in the trash for 30 days by default, then it and every file made from it (models, fingerprints, reports, exports) are purged; Delete forever does that at once, as does deleting the account.
- AI providers
- Your files are never sent to an AI provider and are never used to train models.
What we don't have yet
No SOC 2 report or third-party penetration test yet; customer-managed keys aren't available. Self-hosting in your own cloud is available for Enterprise. Report a vulnerability to support@ground.dev.