01You
How is our data kept safe?
Hollin
The short answers. Business customers can ask for our full security documentation.
Hollin runs on managed cloud infrastructure in the region each workspace chooses. Production access is limited to two engineers and requires a hardware key.
We run an outside penetration test every year and share the summary with Business customers under a non-disclosure agreement.
02You
Where is our data stored?
Hollin
In the region you choose, the EU or the US. Each workspace is stored in one region and never copied to the other.
03You
Is our content used to train models?
Hollin
No. Your sources, questions and answers are used only to draft answers for your workspace.
04You
How is it encrypted?
Hollin
With AES-256 at rest and TLS 1.3 in transit. Keys are rotated every 90 days.
05You
Who at Hollin can see it?
Hollin
Two engineers on call, only when you ask for help or an alert needs it. Every access is written to the audit log.
06You
What happens when we delete a source?
Hollin
Its passages are removed from the index within an hour and from backups within 30 days.
07You
How do we report a problem?
Hollin
Write to the security address on the contact page. We reply within one working day.