Trust and privacy: Cited answers on a SOC 2 Type II audited platform

How it worksUse casesIndustriesPricingTry itTalk to usTrustHonest answers. Protected data.Every answer shows its source, and your content is protected by audited security controls. When he can't find something, he says so and hands off to a person.Chat with Thurston nowTry the live demo Chat with him free. No sign-up.Four promisesWhat you can count on.Warranty Guide, p.6Every answer cites its source.Your content stays yours, and is used only for your Thurston.Sam joined the chatA person can always step in.I can't find that in the manual. Here's who to call.He says "I can't find that" instead of guessing.SecuritySerious about your data.Thurston runs on a platform with independently audited security controls. Here is what that covers.SOC 2 Type II audited platformIndependent auditors check the platform’s security controls every year. The audit covers the platform we build on, not Aptelligence itself.GDPR-ready platformWorkflows for data retention, erasure and residency support EU and other regional privacy rules.Encrypted in transit and at restYour content is encrypted in transit with TLS and at rest with AES-256.Access you controlRole-based permissions and scoped API tokens. Each workspace is isolated and auditable.Personal details redactedOptional redaction runs in the visitor’s browser and removes detected personal details before a message is sent.Locked-down operationsRestricted production database access, a vulnerability remediation process, and encrypted, protected staff devices.Your dataYour content stays yours.You own itEverything you give Thurston stays yours. It is used only for your Thurston.You control itAdd, update or remove sources at any time. Updates run on a schedule you set.You can erase itAsk us to delete your content and conversation history, and we will.Who does whatWho handles your data.AptelligenceWe make Thurston. We build, test and maintain yours, and use your content and conversations only for that work.Our platform providerHosts your content and conversations. It holds the SOC 2 Type II report and runs the encryption and access controls above.The AI model providerWrites each answer from your content.Ask for our subprocessor list or a data processing agreement at hello@askthurston.com. Read our privacy policy.FAQSecurity and privacy questions.All questionsYes. He runs on a platform with SOC 2 Type II audited controls, encryption in transit and at rest, role-based access and isolated workspaces.Thurston is built on SOC 2 Type II audited infrastructure. Independent auditors check those controls every year. Ask us for details.Yes. The platform is GDPR compliant, with workflows for data retention, erasure and data residency.With TLS in transit and AES-256 at rest.Yes. Optional redaction runs in the visitor’s browser and removes detected personal details before a message is sent.You set role-based permissions. API access uses scoped tokens, and each workspace is kept separate.Yes. Remove any source yourself at any time, or ask us to erase your content and conversation history.You do. Your content stays yours and is used only for your Thurston.He answers only from your content and shows the source. If it isn’t there, he says "I can’t find that" and offers a person.When someone asks for a person, or he can’t find the answer, he passes the full conversation to your team.Bring your docs. Leave with Thurston.Chat with him free. No sign-up. Or write to hello@askthurston.comThe right answer, with the source, in seconds.ProductVoiceActionsWhy ThurstonTry it liveIndustriesManufacturersRetailHospitalityHealthcare clinicsSoftwareAll 29 industriesCompanyAbout usTrust and privacyFAQContacthello@askthurston.com© 2026 Ask ThurstonPrivacyAsk Thurston

Trust and privacy: Cited answers on a SOC 2 Type II audited platform

Four promises

What you can count on.

Warranty Guide, p.6

Every answer cites its source.

Your content stays yours, and is used only for your Thurston.

Sam joined the chat

A person can always step in.

I can't find that in the manual. Here's who to call.

He says "I can't find that" instead of guessing.

Security

Serious about your data.

Thurston runs on a platform with independently audited security controls. Here is what that covers.

SOC 2 Type II audited platform

Independent auditors check the platform’s security controls every year. The audit covers the platform we build on, not Aptelligence itself.

GDPR-ready platform

Workflows for data retention, erasure and residency support EU and other regional privacy rules.

Encrypted in transit and at rest

Your content is encrypted in transit with TLS and at rest with AES-256.

Access you control

Role-based permissions and scoped API tokens. Each workspace is isolated and auditable.

Personal details redacted

Optional redaction runs in the visitor’s browser and removes detected personal details before a message is sent.

Locked-down operations

Restricted production database access, a vulnerability remediation process, and encrypted, protected staff devices.

Your data

Your content stays yours.

You own itEverything you give Thurston stays yours. It is used only for your Thurston.

You control itAdd, update or remove sources at any time. Updates run on a schedule you set.

You can erase itAsk us to delete your content and conversation history, and we will.

Who does what

Who handles your data.

AptelligenceWe make Thurston. We build, test and maintain yours, and use your content and conversations only for that work.

Our platform providerHosts your content and conversations. It holds the SOC 2 Type II report and runs the encryption and access controls above.

The AI model providerWrites each answer from your content.

Ask for our subprocessor list or a data processing agreement at hello@askthurston.com. Read our privacy policy.

FAQ

Security and privacy questions.