Security and privacy

How Annsa protects customer data.

How data flows through Annsa

PII protection

Customer feedback is processed to extract themes and priorities. Before any AI call, personally identifiable information is stripped automatically — email addresses, phone numbers, SSNs, credit cards, and API keys are removed. Customer names are stripped for theme classification and embeddings, but deliberately preserved in spec generation so Customer Voice quotes stay verbatim.

Example: "Hi Sarah M., our Enterprise plan is broken" becomes "Hi [customer], our Enterprise plan is broken" before reaching any AI model.

AI providers

Annsa uses multiple AI providers for different tasks:

•Anthropic Claude API (primary spec generation and theme classification)
•OpenAI API (text embeddings, feedback classification, and fallback spec generation)

All API calls use encrypted connections. Your data is not used to train third-party AI models.

Failover

If a provider is unavailable, Annsa falls back to the next provider automatically. A circuit breaker prevents repeated calls to failing providers.

Where data lives

•Database: Supabase (PostgreSQL) with row-level security
•Authentication: Supabase Auth
•Cache: Redis with defined TTLs (minutes to 4 hours)
•Payments: Stripe (Annsa never stores payment details)
•Email: Resend (for shipped customer notifications)

All data is encrypted in transit (TLS) and at rest.

Subprocessors

Provider	Purpose	Data processed
Supabase	Database and authentication	All application data
Anthropic	Spec generation, classification	Anonymized feedback text + repo context
OpenAI	Embeddings, fallback spec generation	Anonymized feedback text
Stripe	Payment processing	Billing details (not stored by Annsa)
Redis	Cache layer	Anonymized priority and brief data
Resend	Email delivery	Customer email addresses (shipped notifications only)

Data retention and deletion

Active accounts

All data retained while the account is active.

After cancellation

Data is retained for 30 days. After 30 days, all data is permanently deleted — feedback, priorities, specs, activity logs, integration connections, and tokens.

On request

Data export available at any time via Settings (JSON format). Full account deletion available on request.

Activity log

Retained for 31 days, then automatically deleted.

Compliance

GDPR

Data export and deletion available on request. PII stripped before AI processing. Data retention policies documented and enforced automatically.

CCPA

Same data rights as GDPR. No sale of personal information.

Team access controls

•Owner: Full access to all settings, billing, team management, and data
•Builder (Editor): Can view and edit priorities, specs, and feedback. Cannot manage billing or team settings

Team invitations expire after 7 days. Members can be removed at any time by the owner.

Responsible AI use

Sensitive identifiers (emails, phone numbers, SSNs, credit cards, API keys) are stripped before all AI calls. Customer names are stripped for theme classification but preserved in spec generation for accurate Customer Voice quotes. Your data is not used to train third-party AI models. All AI operations are logged — model, token count, and cost — visible in the activity timeline.

AI does not make shipping decisions. That's always a human choice.

FAQ

No. Annsa uses AI for classification and spec generation but customer data is never used to train models. Feedback stays within the processing pipeline and is not shared with third parties for training purposes.

Data is stored on encrypted infrastructure with Supabase (Postgres). All connections use TLS. Backups are encrypted at rest.

No. Annsa reads 9 specific signals from your GitHub repository — file signatures, testing patterns, directory structure and a few others. It does not clone, store or index your full codebase. Read access, scoped to what specs need. Annsa never changes your code, though it can open a GitHub issue from a brief.

Only authenticated team members with the roles you assign. Annsa supports optional TOTP 2FA via authenticator apps (no SMS). No Annsa staff access customer data without explicit permission.

Questions?

For security questions or to report a vulnerability: security@annsa.ai

See how Annsa works →