Security

Data handling

Our external Developer API enforces store=False on every request, so calls made through it are never retained by the upstream model provider for training. When you bring your own key (BYOK) or run a local model, your request goes directly to your chosen provider — or stays entirely on your device — under that provider's own terms, not ours.

Bring your own model

Connect your own API key for GPT, Claude, Gemini, Amazon Bedrock, Azure OpenAI, or any LiteLLM-compatible provider — your key, your billing relationship with that provider directly. Or run a fully local model through the desktop app via Ollama or LM Studio: with a local model, your queries never leave your machine.

Transport and storage

All traffic is encrypted in transit (TLS). Account passwords are stored hashed, never in plaintext.

Reporting a security issue

If you find a security vulnerability, please email hi@giis.ai with details. We don't currently run a paid bug bounty program, but we take reports seriously and will respond directly.

Related

See our Privacy Policy and Terms of Service for how we handle your data and what you're agreeing to when you use GiiS.