Security and privacy

Where ZeroWidth keeps your team's data, who can see the data, and how the data is deleted.

Run ZeroWidth yourself, and nothing leaves your network.

Your own model, on your own servers
Self-hosted ZeroWidth works with a model you run, so your team's words never leave your network.
No retention, no training
Hosted ZeroWidth sends text only to model hosts that keep nothing and never train on it.
Staff access is granted and recorded
An admin grants access for a limited time. We also look when we investigate a report of abuse. Every look is recorded.

Hosted in the US
On Google Cloud, in the United States.
Encrypted
In transit and at rest.
Each team kept apart
No team can see another team's data.
Secrets removed first
Passwords and keys in your text are removed before any AI model reads it.

Sign-in by email link
Each person signs in with a link sent to their own email address, and each AI tool they connect acts as them.
Two-step sign-in
Codes from an authenticator app, with recovery codes. An admin can require two-step sign-in for the whole team.
Roles
Owner, admin and member. Members and sign-in
An audit log
Every admin action is written to the team's audit log.
Self-hosted stays local
ZeroWidth answers only on its own computer until you open ZeroWidth to your network, and then every request needs a token.

Export
An admin can download the team's data at any time. Exporting your data
Deleting a team
Deleted 7 days after the owner asks, and gone from backups 7 days after that. Delete a team

Google Cloud, OpenRouter, SendGrid and Stripe
Hosting, AI model access, email and payments. What each one does, and where

contact@zerowidth.ai
Email what you found and how to reproduce it. Please give us time to fix the problem before you share it.