Data Security & AI Compliance

At AI For Biz, we enforce rigorous technical and operational standards to ensure your business data and customer conversations remain secure, private, and fully compliant with Australian regulations.

1. Data Encryption & Security

In Transit: All communication channels routing through our platform — including Webchat, SMS, Voice AI, and Social DMs — are protected using industry-standard Transport Layer Security (TLS 1.3) encryption.

At Rest: All client databases, CRM records, and business knowledge bases are securely stored using Advanced Encryption Standard (AES-256).

Sub-Account Isolation: Each client's CRM environment is provisioned as a separate, distinct sub-account with strict data partitioning. Your data is strictly siloed and never visible to other clients.

2. Data Storage & Infrastructure Location

AI For Biz delivers its services through secure, enterprise-grade cloud infrastructure. Our platform's infrastructure runs on Google Cloud Platform (GCP) and Amazon Web Services (AWS) data centres located in the United States.

In accordance with Australian Privacy Principle 8 (APP 8) regarding cross-border data transfers, please note that all customer records and AI knowledge bases are stored on these secure US servers. All data remains encrypted at rest and in transit regardless of geographic location, and our platform partners are bound by strict contractual data processing obligations.

3. AI Data Privacy & Siloed Training

Data Isolation: Your business data, pricing lists, and customer chat histories are strictly sandboxed. Data used to configure and train your specific AI agent is never used to train public global models or shared with anyone else.

Human-in-the-Loop Safeguards: Our system allows business owners to monitor all autonomous AI chat histories in real-time. Staff can intervene, take over live conversations, or override AI bookings instantly via our mobile application.

4. Telecommunication & Anti-Spam Compliance

AI For Biz operates in strict adherence to Australian telecommunications law:

Spam Act 2003 (Cth): Our marketing automation tools feature built-in automated opt-out keywords (e.g., "Reply STOP to opt out"), ensuring your automated SMS and email campaigns remain 100% legally compliant within Australia.
Do Not Call Register Act 2006: Our communication routing structures prevent unauthorised cold-calling or text-spamming, fully protecting your brand reputation.

5. Backups & Data Deletion

Daily Backups: Your entire CRM database, customer lists, and conversation histories are backed up automatically every 24 hours to secure cloud servers to ensure rapid recovery capability.

Deletion Requests: You retain full ownership of your data. You may request the permanent deletion of your business data and all associated records at any time by contacting us. Verified requests will be actioned within 30 days.

6. Contact & Compliance Enquiries

For any questions regarding our data security protocols or compliance frameworks, please contact us: aiforbiz.com.au/contact-us