Your data stays yours.

We designed Tnuki to be secure from the ground up. Our CEO, Jason Gao, has over a decade of experience in security. He previously built advanced cybersecurity tools at a U.S. national lab and led the information security org at 10x Genomics. Learn about how we protect your information below.

Protected by default

See who processes your data →

No model training

Nothing you put in Tnuki trains an AI model, ours or our AI providers’. They process it under business terms that rule training out.

You approve what goes out

Tnuki drafts your emails, and none is sent without your OK or outside the rules you set.

Encrypted in transit and at rest

TLS on every connection, full-disk encryption on systems that hold customer data, and backups encrypted before they leave them. Hosted in the US.

Your data is isolated

Your data is kept apart from every other customer’s. No other customer can see it unless you share it.

You maintain control over your data

Key resources

Common questions

Do you use my data to train AI models?

No. Nothing you put in Tnuki trains an AI model, ours or our AI providers’. They process your content under business terms that don’t allow training on it.

Do you sell my data?

No. We make money from subscriptions, not from your data. We don’t sell your information, and we don’t share it with advertisers.

Does Tnuki send emails for me?

Only with your approval. You approve each email Tnuki drafts, or the rules you set for anything it sends on your behalf.

Are you SOC 2 compliant?

Not yet. SOC 2 is an outside audit of a company’s security controls, and it’s on our roadmap. Until then we share our security overview, complete your security questionnaire, and provide a data processing agreement.

Where is my data hosted?

In the United States, on dedicated virtual servers that run only Tnuki. They accept no traffic from the internet: everything reaches them through encrypted tunnels to Cloudflare.

Who at Tnuki can see my data?

Only a handful of named people on our team, through a separate locked-down sign-in, and every visit is logged. We use it to support you, fix problems and keep Tnuki working well.

How do I delete my data?

Email support@tnuki.com from the address you signed up with. On a verified request we delete the personal data we hold about you across our systems within 30 days, except records the law or security requires us to keep. Copies in our encrypted backups expire on their own within 13 months. You can also view and delete what Tnuki remembers about you at any time, and diagnostic files are deleted automatically after 90 days.

Can you complete our security questionnaire or sign a DPA?

Yes. Email security@tnuki.com and we’ll complete your questionnaire, provide a data processing agreement, or get on a call.

For your security review

The specifics behind the promises above, from our security overview. Last updated October 27, 2026. Ask us for the full document.

Infrastructure

  • Dedicated virtual servers at Hetzner in a United States data center. They run only Tnuki; no application runtime is shared with another organization.
  • Inbound is default-deny at both the provider’s network firewall and the host firewall, so the origin accepts no connections from the internet. The only path in is Cloudflare Tunnel, with TLS termination and WAF at the edge.
  • Operator access runs over Cloudflare Zero Trust (WARP), a private network. No SSH or management port is exposed to the internet.

Encryption

  • In transit: TLS 1.2 or later, HTTPS enforced at the edge. Origin and management traffic stays inside Cloudflare’s encrypted tunnel and WARP.
  • At rest: production disks use full-disk encryption (AES-XTS). The passphrase is typed at boot and is stored on no server and with no provider.
  • Backups: encrypted with AES-256 on the host before upload, with the key managed separately from the storage credentials. The storage provider only ever sees ciphertext.

Access control

  • Key-based only. Password authentication and root login are disabled on every server.
  • People authenticate with non-exportable keys held in a Secure Enclave; each use needs a physical touch. Automation runs under its own OS identity with a four-hour grant that a person has to renew.
  • Privilege elevation uses the same keys, so the audit log names the specific person or the automation identity. There is no shared admin account.
  • Internal admin surfaces sit behind Cloudflare Access, restricted to named people. MFA is enforced on hosting, DNS, CDN, and email accounts.

Your data

  • Each account’s data is scoped server-side. A cross-account read fails closed.
  • Payments for self-serve plans go through Stripe’s hosted pages (PCI DSS Level 1). We never receive or store a full card number.
  • Subprocessors (AI, web search, email, payment, and infrastructure providers) are listed in our Privacy Policy. AI providers process your content under their business terms, and nothing you put in Tnuki trains a model.
  • Deletion on request, within 30 days; backups that still hold a copy expire within 13 months. Per-conversation diagnostic files expire after 90 days.
  • Secrets live in host-specific environment files and provider secret stores, scoped per service. Nothing is in source control.

Backups and recovery

  • Encrypted, deduplicated backups to off-site object storage every hour. Each one sits under a 30-day object lock (WORM), so a compromised host cannot delete or rewrite earlier backups. We keep every backup for 32 days, then one a week for 8 weeks and one a month for 12 months.
  • A weekly integrity check plus an automated restore drill. Both the hourly and weekly jobs report to a dead-man’s switch that alerts us when a run is missed or fails.
  • RPO about one hour. RTO about one hour: rebuild the host, restore the latest snapshot. The steps are written runbooks.

Monitoring

  • Uptime and health checks run from a separate host at a separate provider. Alerts go out on multiple channels, and the monitor itself sits behind a dead-man’s switch.
  • Admin access and privileged server actions are logged.

Compliance

  • SOC 2: on the roadmap, not yet attested.
  • DPA: available on request.
  • Questionnaires: send yours. We’ll complete it and talk through anything it doesn’t cover.
  • Data residency: United States.

Have a security question? Write to our security team.

security@tnuki.com

See what Tnuki can do

Account and market intelligence in one easy-to-use chat.

Or talk to a human →