G-P Gia Security and Privacy
Protecting your data is our top priority. Our commitment to data privacy and security is embedded in every part of our business.
Certifications & Compliance
At G-P, we're committed to keeping your HR compliance data safe. G-P is SOC 2 certified, meaning we’ve met rigorous security standards. For Gia, we've implemented comprehensive security controls based on SOC 2 Type II principles, and we’re on a structured pathway to formal certification.
We provide transparency through our privacy and security center, where you can access our security policies, the results of our most recent penetration test, and regular updates on our certification progress.
Security & Protection
G-P provides a robust set of in-product data protection and admin controls to give you more visibility and control over your data. Enterprise admins can enable enterprise-grade security controls, including single sign-on (SSO) integration and audit logging.
- Encryption: All data encrypted at rest and in transit using industry-standard encryption.
- Roles & Permissions: Comprehensive access controls with role-based permissions and MFA.
- SSO (SAML): Seamless secure access with your existing identity provider.
- SCIM: Automate user provisioning for efficient access management.
- Audit logs: Complete visibility into user actions for compliance and security tracking (on request).
- Team Management: Set access permissions for your team. Ensure only the right roles have access to the data they need.
Data Privacy & Controls
G-P adheres to strict data privacy regulations and guidelines to protect each individual user.
Data Confidentiality
Your queries and documents are kept separate from other users’ information. Your data remains confidential and is not shared or used by any third-party except for our trusted data processors who adhere to strict data privacy agreements.
Document Deletion
Users can submit formal data deletion requests at any time and we’ll permanently remove the specified data from our systems.
Data Retention
Data retention for AI is aligned with our broader data retention policies as described in customer agreements and documentation available on our security portal.