Trust and security
Your data, protected.Every action approved.
Livvy recommends and your team approves. Every recommendation shows the evidence behind it, your data stays in the region you choose, and one switch turns the AI off.
How we work
People stayin control.
We ask your people to be careful with data. We hold ourselves to the same standard.
Your data stays in your region
Choose US or EU data residency. Your workforce data is stored and processed in the region you pick.
Livvy proposes, a person approves
Livvy drafts simulations, training, policy entries and program changes. An admin approves or edits each one before anything runs.
Human decisions stand
When new data arrives it never undoes a decision a person made. Machine evidence and human judgment are stored separately.
AI controls
How we governour own AI.
Security teams evaluating an AI vendor should ask how that vendor governs its own AI. Here is how we govern Livvy.
01
An AI off switch you control
One customer-controlled switch turns every AI feature off at once and deletes nothing.
02
PII detection
Built-in detection of personal information in what Livvy reads and writes.
03
Prompt-injection detection
Built-in prompt-injection detection, and web content Livvy fetches is always treated as untrusted.
04
Least-privilege tools
Livvy has no shell and no code execution. It can use only the tools its task needs.
Platform security
Security reviews,made simple.
01
Hosted on AWS
The platform runs on Amazon Web Services, in the region you choose.
02
Encrypted identity data
Identity and user data is encrypted with AES 256.
03
Documented to recognized frameworks
Our security practices and policies are documented to align with GDPR, NIST, PCI, COBIT and HIPAA.
04
Responsible disclosure
Researchers report vulnerabilities to vulnerabilities@livingsecurity.com. We aim to acknowledge every report within 5 business days.
Security documentation for your review is available on request.
Find them in our trust center, or ask your account team.
Privacy questions: privacy@livingsecurity.com
Policies and agreements
Privacy policy
How we collect, use and protect personal information.
ReadTerms of service
The terms for using our websites and services.
ReadData protection statement
How platform data is collected, processed and retained.
ReadService level agreement
Availability and support commitments.
ReadResponsible disclosure
How to report a security vulnerability to us.
ReadEnd user license agreement
License terms for the platform.
ReadQuestions
Trust and security FAQ
Where is my data stored?
In the region you choose: the United States or the European Union.
Can we turn the AI off?
Yes. A customer-controlled switch turns every AI feature off at once and deletes nothing. Turn it back on when you are ready.
Does Livvy take action on its own?
No. Livvy proposes simulations, training, policy entries and program changes, and a person on your team approves or edits each one before it runs.
How are employees treated?
As coaching, not punishment. A click on a simulation opens a teachable moment that shows the exact cues they missed, and any follow-up is a short module matched to that lure. People who report a phish are thanked, and their risk profile improves. Each employee sees their own scorecard, managers see their team’s, and executives see the trend. Livvy proposes every intervention, and a person on your team approves it before it runs.
Do employees see a risk score?
Yes, if you choose. Many customers share each person’s Human Risk Index, or a behavior score they define, on that person’s own scorecard: where they stand, why, and how to improve. It’s one of the strongest drivers of behavior change and ownership we see. You can also show levels in words only. Either way it’s coaching, never punishment, and never a public ranking.
Do phishing simulations capture passwords?
No. Credential pages record that someone submitted the form and never store what they typed. Voice simulations keep the result and never a transcript.
Can we review your security documentation?
Yes. Ask your account team or contact us, and we will send the documentation your security review needs.
AI you can explainto your board.
See how Livvy finds risk, shows its evidence and waits for your approval.