How we protect your cloud cost data
We understand that your cloud cost data is sensitive. That's why we've built CARTIE AI with privacy-first principles. You always have complete control over your data.
AES-256-GCM encrypts your data at rest (stored in database). TLS 1.3 encrypts data in transit (over the network). This is the same encryption used by banks and government agencies.
We NEVER persist your AWS, Azure, GCP, Snowflake, Databricks, or DigitalOcean credentials in our database. Credentials are used in-memory to run a read-only audit and then discarded — they are not written to disk or logs.
Every action in CARTIE AI is logged with timestamps, user IDs, and IP addresses. Full audit logs are available for compliance review and can be exported anytime.
When you run a cloud audit, your read-only credentials are held in-memory only for the duration of the scan, then immediately discarded. We do not persist them in our database, on disk, or in logs.
Granular permissions ensure team members only see what they need. Passwords are hashed using bcrypt (one-way encryption - even we cannot see them).
You can export or delete all your data at any time. We honor deletion requests within 24 hours. Your data, your control.
We use industry-standard encryption methods. Here's what each one means:
bcrypt (one-way hash)Cannot be reversed, even by usAES-256-GCMMilitary-grade encryption for stored dataTLS 1.3Latest encryption for network trafficEnvironment variablesNever stored in code or databaseBottom line: Your passwords cannot be decrypted (one-way hash). Your data is encrypted with military-grade AES-256. All network traffic uses TLS 1.3 (same as online banking). Your cloud credentials never touch our servers.
Our AI features are designed with privacy in mind. You have complete control over what data the AI can access, and you can disable AI features entirely if you prefer.
Important: When AI features are enabled with "Limited" or "Anonymized" mode, the AI only sees aggregated summaries—never your raw cost data, resource IDs, or credentials.
View all data we have about you
Download your data anytime
Request complete data deletion
Update or correct your data
Our security team is happy to answer any questions or provide additional documentation.
hello@cartieai.com
© 2026 CARTIEAI. All rights reserved.