Welcome to Posh AI's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation.
To report a potential security issue, reach out to security@posh.tech
Subprocessors
Subprocessors
- Are cryptographic keys rotated based on a cryptoperiod calculated while considering information disclosure risks and legal and regulatory requirements?
- How does Posh ensure 3rd party AI providers only process and do not persist any data or use Posh or client data in model retraining?
- Does the organization review contracts and services against FFIEC guidance?Describe how.
- Are policies and procedures reviewed and updated at least annually?
- Are policies that require all supply chain CSPs to comply with information security, confidentiality, access control, privacy, audit, personnel policy, and service level requirements and standards implemented?
General Updates
We are pleased to announce that we are one of the first organizations (and the first in our industry) to receive the CSA’s STAR for AI level one! This serves as an AI specific controls and safety addition to our existing CSA STAR Level one compliance, and continues Posh’s commitment to trustworthy AI.
In addition, the following documents have are available for download:
AI CAIQ
2026 Certificate of Insurance (replacing the version uploaded in error earlier)
We have released the following updated documents, and they are available for download:
2025 Security Whitepaper
2025 Penetration Test Attestation Letter
We are excited to announce our addition to the list of organizations that have signed the Cloud Security Alliance’s AI Trustworthy Pledge! This makes us the first in our industry to pledge our commitment to responsible AI development and deployment, and affirm our alignment with the core principles of safety, transparency, ethical accountability, and privacy in AI systems. The signing of this pledge was an easy decision for Posh, as it signifies a commitment to shared principals we already live by and were founded under. We are excited to join a list of prestigious fellow signees in our commitment to making products and solutions that deliver fantastic, personal, and private AI to our customer’s communities and members. For more information about our security practices, see our trust page, and for more information regarding the AI Trustworthy Pledge, see https://cloudsecurityalliance.org/star/ai-trustworthy-pledge/organizations.
Document Updates
There is an update to a document available for download on our Trust Center:
2026 Certificate of Insurance (COI)
Subprocessor Addition
We are adding a new Subprocessor
Supabase-Training Simulator-related services.
We are adding a new Subprocessor:
Elastic-Search services
Updated Reports and Subprocessor additions.
As part of Posh’s continued commitments to our security and compliance standards and being good stewards of the data and privacy of the organizations we serve, our completed SOC 3 and SOC 2 Type 2 reports have been updated for 2025 and are available for download.
In addition, we occasionally add subprocessors to facilitate service innovation, stability, and delivery. The following Subprocessors have been added:
Google Gemini-LLM Provider.
Rime AI-Text to Speech.
Adobe-Document Normalization.
Deepgram-Speech to Text.


