Trust, in one place.
Everything your security, procurement, and information-governance teams need to evaluate Hush AI: the architecture, the paperwork, and the things we are honest about not having yet.
The short version: we keep no conversations or documents. We process what you send, then it is gone, so there is nothing to leak, sell, or hand over. What we do not keep, no one can take.
Public registers, copy-paste terminal checks, and what we do not hold yet. Security & architecture
How inference runs on hardware we own, what is logged, the threat model. Procurement & due diligence
The dated certification table and what to send your IG lead. AI privacy checker
Two minutes to see whether your current AI is within US legal reach. Privacy policy
What data we process, where, for how long, and your rights. Terms of service Acceptable use policy
Verifiable facts
Companies House no. 17278687 · ICO registration ZC126901 · registered in England & Wales · inference on hardware Hush AI owns in the UK · sub-processors: Stripe (payments) and Cloudflare (CDN) only, never your prompt content.
In the spirit of the honesty we ask of others: Hush AI is not yet ISO 27001 or SOC 2 certified and does not run a 24/7 SOC. We set out exactly what we hold and what is in progress on the Security and Procurement pages.
Frequently asked questions
Where is my data stored with Hush AI?
On your own device. Conversation history is stored encrypted there until you delete it, never on our servers, and is never used to train models.
Does my data go through Big Tech (OpenAI, Google, Microsoft)?
No. Hush runs its own models on its own hardware, with no third-party AI API in the chain, so your content never passes through a Big Tech system. And because we store none of your conversations or documents, there is nothing for anyone to be compelled to hand over.
Does Hush AI use my conversations for training?
No. Your content is never used to train models and is never analysed for marketing. We do not store the content of your API requests; your web-chat history is stored encrypted locally on your own device until you delete it, and only request metadata is logged.
Can I get an audit trail for my information-governance lead?
Yes. You can export an audit log of your usage in one click, in CSV or JSON, your own GDPR Article 30 / IG evidence pack, yours to keep.
You are a new company. Should I trust you with sensitive data?
A fair challenge, and you should not have to take our word for it. Everything on this page is checkable: the company at Companies House (17278687), our data-protection registration at the ICO (ZC126901), and the privacy claims themselves in the product, because there is no conversation or document stored on our servers to leak or hand over. Because we are early you would be among our first, so rather than another organisation's assurances the free two-week pilot leaves your IG lead a report from your own audit log, verifiable against your own work. Every trusted supplier had a first customer, and we would rather earn yours on evidence you can check than on a testimonial you cannot.