Security & AI Governance
Effective Date: January 1, 2026 • Last updated: August 2026 — DeckCraft AI enforces a strict zero-model-training guarantee, AES-256 encryption at rest, TLS 1.3 in transit, database Row Level Security (RLS), and SHA-256 deterministic checksum verification.
Customer presentations and prompts are never used to train public foundation models.
End-to-end encryption across all presentation workspaces, vector assets, and API requests.
Cryptographic checksum matching for strict compliance in medical, financial, and legal slide decks.
1Enterprise Security Philosophy
Executive presentations, investor pitch decks, clinical trial data, and board communications contain some of the most sensitive intellectual property in your organization. DeckCraft AI was engineered from the ground up with a “Security by Design” philosophy, enforcing multi-tenant isolation, cryptographic verification, and strict AI data segregation.
2Cryptographic Encryption & Data Isolation
- Data in Transit: All web traffic, API transactions, and real-time presentation collaboration channels are encrypted using TLS 1.3 with strict HSTS (HTTP Strict Transport Security) enforcement and modern cipher suites.
- Data at Rest: All database volumes, slide structured records, customer workspaces, and media assets are encrypted using AES-256 bit encryption managed through cloud key management hardware (FIPS 140-2 Level 3 validated).
- Row Level Security (RLS): Our database infrastructure enforces granular Row-Level Security at the database engine layer. Every query is bound to the verified session identity, cryptographically preventing cross-tenant presentation access.
3AI Pipeline Isolation & Bring-Your-Own-Key (BYOK)
- No Foundation Model Training: Zero customer inputs, prompts, or presentation graphics are retained or used to train public or commercial AI foundation models.
- Ephemeral Inference: Slide text transformations occur in volatile memory and are evicted immediately upon completion of generation.
- Client-Side BYOK Management: User-supplied custom API keys are encrypted and stored solely in your client browser's local storage. They are never written to disk or recorded in backend database tables.
4Exact Preservation Mode & Regulatory Compliance
For regulated industries (pharmaceutical research, clinical trials, SOX financial reporting, and legal discovery), DeckCraft AI provides an Exact Content Preservation Mode:
- Deterministic text parsing extracts raw slide text without generative hallucination.
- Every exported slide generates a SHA-256 cryptographic hash comparing source presentation text to target slide canvas text to verify 100% fidelity.
- Supports audit logging for FDA 21 CFR Part 11 and SOX compliance workflows.
5Vulnerability Reporting & Bug Bounty
We welcome responsible vulnerability reports from independent security researchers. If you identify a potential security issue, please contact us promptly:
DeckCraft AI Security Operations Center
Email: impactdynamics.biz@gmail.com
PGP Key: Available upon request for encrypted disclosure.
Response Time: Initial assessment within 24 hours.