Security & Privacy

Your pipeline is yours. Always.

Founders trust Stoned AI with their most sensitive go-to-market data. Here's how we protect it.

We never train on your data

Your conversations, prospects, and call transcripts are never used to train any AI model — ours or anyone else's.

Encrypted in transit & at rest

TLS 1.3 in transit, AES-256 at rest. All secrets stored in a hardened vault.

Workspace isolation

Row-level security on every database table. Your data is invisible to other workspaces, including team members you haven't invited.

Trusted infrastructure

Hosted on SOC 2 / ISO 27001 certified cloud providers (Cloudflare + Supabase EU/US regions).

DPA available

Standard DPA included on Team and Scale plans. Custom MSA available for Scale customers.

SOC 2 Type II in progress

Audit underway with a Big Four assessor. Targeted completion Q3 2026. Vendor questionnaire available on request.

Need a security review?

We'll send our latest pen test summary, vendor questionnaire (CAIQ-Lite), and DPA within one business day.