Security
Wednesday afternoon, a client’s lawyer sends a security questionnaire. Question four: who can read what we give you?
Plans
With the edges drawn in- Pro included
- Agency included
What We Do, and What We Never Do
- Your agency’s work stays your agency’s
- Writing isn’t used to teach AI, under Anthropic’s terms
- Staff don’t read your clients’ work
- Delete a client and it is gone from GoMimic
- Encrypted on the way and at rest
Even our servers can’t read it
they have to, to do the job
What It Does
One page you can send a client: what happens to their writing, who reads it, how it’s deleted, and how it’s encrypted. It also says what we can’t promise, because anyone who has read this far will ask.
How It Works
1
Rules in the Database
Row rules keep each account’s rows to that account, and we test them with two people on a real database.
2
Switches You Hold
The emailed review code, Confidential, deleting old posts, and switching off links are all per client.
3
A Record for the Owner
Sign-ins, exports, deletions, review links, and team changes, as they happen.
Worth Knowing
What staff readWe don’t read drafts, voice records, or approvals as part of running GoMimic. We do read a free-tool submission, to check it before it goes back, and whatever you write to us yourself.
What we don’t claimZero-knowledge encryption. To create a piece, our server has to pass the text and the client’s rules on over a secure connection.
Encryption, plainlyTLS 1.3 on the way, and 1.2 at the oldest. At rest, AES-256, which is our database host Supabase’s own documented claim.
A Client Asked You Something Hard?
Free for 14 daysNo credit card needed