Data Privacy, Security & Compliance Overview
How Goldie protects your data — and why you can trust it
Ask Goldie AI Support Agent (included with your subscription)
- Ask Goldie is Vertican’s free AI support agent, fully integrated into Vertican’s documentation and help manuals. Ask Goldie eliminates time wasted searching through documentation and provides you with quick answers 24/7.
- Ask Goldie is a standalone support tool that operates securely outside your environment, without requiring installation or integration with your software. It will not alter or access your existing system of record or any other system your firm uses.
- Prompts that you provide to Ask Goldie are not used to train the AI agent, and Ask Goldie only provides Vertican documentation to other Ask Goldie users, ensuring that information from your prompts is not shared with others. Ask Goldie improvements are made by our developers based on thumbs up/thumbs down feedback from users.
- As with all Vertican products and documentation, Ask Goldie results are the intellectual property of Vertican.
Goldie Plus (premium tier)
Goldie Plus has two components:
- Goldie Custom Agent
- Access to the Goldie Automation Suite
Goldie Custom Agent
- The custom agent is a private instance of Ask Goldie, using your firm SOPs and client manuals, as well as Vertican documentation. This means it returns responses based on your firm's specific processes and any customizations to your VT software.
- Access to the agent will dramatically increase the speed at which your staff can find answers specific to your firm and is available 24/7.
Why is the Goldie Custom Agent Secure?
- The Goldie Custom Agent operates as a private AI instance for your firm. Unlike public, consumer AI tools (such as ChatGPT), the agent does not share your data with other users, use your data to train AI models, or expose your queries to the internet.
- The Custom Agent is hosted on enterprise-grade cloud infrastructure across Vercel (application hosting), Neon PostgreSQL on AWS (database), and Cloudflare R2 (file storage). All providers maintain SOC 2, ISO 27001, and GDPR certifications.
- Data is processed in the United States.
What Data Is/Is Not Retained by the Custom Agent?
- Data Retained: The Goldie Custom Agent stores your organization’s SOPs and client manuals in a secure cloud environment. Conversation logs may be retained for quality assurance and product improvement within your private instance.
- Data Not Retained: The agent does not store Personally Identifiable Information (PII) from consumer accounts, debtor records, or case files unless explicitly uploaded by your team as reference material.
How is the Custom Agent Different from ChatGPT?
| Feature | Goldie Custom Agent | Public AI Services (e.g., ChatGPT) |
|---|---|---|
| Private Instance | Yes - your data stays isolated | No - shared infrastructure |
| Data Used for AI Training | No - your data is never used to train models | Yes - trains on your data by default |
| Industry-specific Knowledge | Yes - trained on Vertican product documentation, as well as your firm SOPs and client manuals | No - general purpose only |
| PII Exposure Risk | Minimal - no cross-firm data sharing or external sharing; private environment | High - data may be logged and reviewed |
| Compliance-ready | Yes - built in accordance with regulatory requirements | No - not designed for regulated industries |
What Does “Private Instance” Mean?
- When we say the Goldie Custom Agent runs on a “private instance,” we mean your organization’s data is isolated from all other firms. Your documents, queries, and AI responses are processed in a dedicated environment that is not accessible to other Vertican clients or the general public.
- Isolation is enforced at the tenant level. This means each firm’s data, documents, and conversation history are scoped exclusively to their organization and are inaccessible to other Vertican clients.
- Role-based access controls (RBAC) are enforced across the platform.
How is Our PII Protected?
- Goldie is designed to minimize Personally Identifiable Information (PII) exposure. Your queries and uploaded documents remain within your private instance.
- All data is encrypted in transit (TLS 1.2+) and at rest.
- Data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256 (Neon PostgreSQL via AWS KMS; Cloudflare R2 platform encryption).
- Encryption keys are managed by Vertican’s cloud infrastructure providers using their native key management services.
- Goldie does not access your Collection-Master, Q–LawE, or vExchange account data unless explicitly connected via approved integrations.
- No client data is transmitted to third-party AI model training pipelines.
- Access to client data is restricted to authorized personnel on a need-to-know basis, following the principle of least privilege.
How Can We Pass Compliance Testing While Using Goldie?
Vertican provides the following to support your compliance audits:
- Information in the Data Privacy, Security & Compliance Overview (this page).
- Due Diligence Questionnaire (DDQ): submit to VTComplianceCommittee@Vertican.com.
More Information
- For compliance inquiries, data security questions, or to submit a Due Diligence Questionnaire, email VTComplianceCommittee@Vertican.com.
- Find out more about data and compliance on the Vertican Trust Center.