Built to earn trust before it asks for access.
AI Station connects to operational data, so how we handle it matters as much as what the AI does. These are the rules every pilot follows.
Read-only by default
Pilots start with read-only access. Nothing is written to your systems, machines or client tenants unless you explicitly decide to enable it later.
A person approves every action
AI Station drafts, ranks and flags. Work orders, customer messages and remediation steps wait for a named person to approve them, and every approval is logged.
Least-privilege access
We ask only for the access a workflow needs, scoped to the systems agreed in the pilot. You can revoke it at any time.
Canadian data options
Canadian hosting options are available. Every agreement states in writing where your data is stored and processed.
Your data stays yours
Your data is used to deliver your service. It isn't used to train AI models for other customers, and it's deleted at the end of an engagement on request.
Clear about AI providers
AI Station uses third-party AI models through business APIs. We tell you which providers process your data and under what terms before anything is connected.
Privacy law in Canada
Pilots are designed to support your obligations under PIPEDA and applicable provincial privacy laws, such as Quebec's Law 25 and the personal information protection acts in British Columbia and Alberta.
If your business has specific requirements, such as data that must stay in a province or a client contract with security terms, tell us during discovery and we'll address them in the pilot agreement.
Report a security issue
If you believe you've found a security issue with AI Station, email [email protected]. We acknowledge reports within two business days.
Have security questions before a pilot?
Send us your questionnaire or requirements. We'll answer them in writing before any data is connected.