Vauda
Privacy and security

Your material trains
no model.

Vauda uses AI to catalog your assets — not the other way around. No provider that touches your material may train on it, and we don't ask you to take our word for it: here is each one, what it touches, and where to verify it.

Nobody trains on your assets

Neither we nor the models we use. Your photos, your voice and your documents are processed, cataloged and forgotten: none of it ends up living inside someone else's model.

Encrypted and isolated per organization

AES-256 at rest and TLS in transit. Every organization is isolated at the data layer, and all delivery uses signed links that expire — an asset never sits at a permanent public URL.

You decide what leaves, and until when

Password-protected links, downloads under control and instant revocation. Rights-managed material can be restricted by country and expiry date, and once it lapses it locks without leaving your catalog.

Who touches your material

ProviderWhat it touchesCommitment
OpenAICatalogs images, video and documentsDoes not train on data sent through the API. Abuse logs retained for 30 days at most.
AssemblyAITranscribes audio and videoExcluded from the model improvement program. SOC 2 Type 2 and ISO 27001.
Voyage AI (MongoDB)Generates the search vectorsDoes not use customer embedding or reranking data to train its models.
Backblaze B2Stores the originalsAES-256 encryption at rest. SOC 2 Type 2. Object Lock (WORM) against deletion and ransomware.
ClerkIdentity and sessionsSOC 2 Type 2 and ISO 27001. Certified under the Data Privacy Framework. Prohibited from selling personal data.

Each commitment links to the provider's public policy. Verified July 2026. The certifications listed belong to each infrastructure provider, not to Vauda.