Security at GroupBox
Last updated: July 16, 2026
Your Project Memory holds your product's most valuable context. Here's how we protect it.
1. Encryption everywhere
All data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256. Project Memory contents, credentials, and integration tokens are additionally encrypted at the application layer.
2. Access control
Workspaces are strictly isolated per customer. Within your workspace, role-based access control (Enterprise plan) lets you decide who can view, edit, or administer each project. Access to production systems by our staff is limited to a small on-call group, protected by SSO and hardware keys, and every access is logged and reviewed.
3. AI model providers
Agent requests are processed by vetted AI model providers under agreements that prohibit training on your data. Your Project Memory is never shared across customers, and context sent to models is scoped to the minimum needed for the task.
4. Secure development
Every change goes through code review, automated testing, and static analysis before deployment. Dependencies are monitored for known vulnerabilities and patched promptly. We maintain separate environments for development, staging, and production.
5. Availability and backups
Data is backed up continuously with point-in-time recovery. Backups are encrypted and stored in geographically separate locations. We target 99.9% uptime and publish maintenance windows in advance.
6. Responsible disclosure
We welcome reports from security researchers. If you believe you've found a vulnerability, email sales@groupbox.co with the details and we will respond within 48 hours. Please avoid accessing other users' data and give us reasonable time to remediate before public disclosure.
7. Compliance roadmap
We align our controls with industry standards and are actively working toward SOC 2 Type II certification. Enterprise customers can request our current security documentation and complete due-diligence questionnaires.
Questions?
If you have any questions about this document, contact us at sales@groupbox.co or write to us at GroupBox AI, Hyderabad, India.