Security

Your records stay yours.

Plain answers to the AI security and data privacy questions owners ask before they connect anything. Under each one, a line of technical detail for your IT adviser.

Read the film's words

Before a company connects anything to an AI, someone always asks: who else will see our data? With AskNeil, your admin approves the connection once, in your own Microsoft or Google admin centre. Nothing is connected without it.

Behind that, five layers protect your records. The first: one guarded way in. AskNeil's databases can't be reached from the internet at all, and AskNeil's own engineers go in only through an entrance that records who came in.

Your team signs in with the work accounts they already have. No new passwords, and your two-step check still applies. When someone leaves and their account is closed, their access closes too, by itself.

Then, the permissions you already have. Priya and Mei ask the same question. Mei can open the pay review, so she gets the answer, with its source. Priya can't, so Neil never even reads it for her. And managers see which topics come up, never anyone's conversations.

Everything is encrypted, when it's stored and while it's moving. And your records are kept apart from every other company's, at every level.

Your records are never used to train AI models. You choose what stays out: a private folder, a whole mailbox. When someone leaves, a colleague can take over their mailbox, until a date you set. And AskNeil's support team can look in only if your admin allows it, and every look is recorded.

Your records stay yours.

The whole picture

Five layers between your records and anyone who shouldn't see them.

Each layer does one job. Together they mean that a person sees only what they could already open, and nobody else sees anything at all.

And one key stays with you: AskNeil's support team can open your records only if your admin allows it.

One guarded front door
A private network
Sign-in with your work account
The permissions you already have
Encrypted, stored and moving
Your records
Who gets in

Only your people, with the accounts they already have.

Do my staff need new passwords?

No. Your team signs in with the Microsoft or Google work account they already use. AskNeil never sees or stores a password, and the two-step verification you already use applies here too.

For your IT adviser: sign-in through Microsoft Entra ID or Google. The provider's token is exchanged for a first-party session cookie (HttpOnly, Secure, SameSite) and discarded. Access rights are re-checked on every request.

Can we choose who in the company uses AskNeil?

Yes. Your admin decides who has a seat, person by person or by group, and can change it at any time. Anyone else who signs in with a company account is turned away.

For your IT adviser: seats are granted to individuals or to Microsoft 365 or Google Workspace groups. Signing in proves who someone is; a seat decides whether they get in.

What happens when someone leaves the company?

When their work account is closed, their access to Neil is removed automatically, usually within the hour. Nobody has to remember to do it, and nothing they could see before stays open to them.

For your IT adviser: account and group changes in Microsoft 365 or Google Workspace are picked up automatically; a disabled account loses all document access.

Can a colleague take over a leaver's mailbox?

Yes. On your admin's request, we give a named colleague access to their mailbox until a date you set, up to a year at a time. Every source from it is marked, and your admin can see who has access and withdraw it at any time. How a mailbox handover works

For your IT adviser: a time-limited grant to one named person, capped at 365 days and recorded in an audit log. It works for a disabled Microsoft 365 account, as long as the mailbox is kept.

Who sees what

The permissions you already have, followed to the letter.

Will staff see files they shouldn't?

No. Neil learns who can open each file, mailbox and chat from Microsoft 365 or Google Workspace, and keeps up as that changes. The check happens before Neil looks for an answer, so Neil never even sees what that person can't open.

For your IT adviser: access rules are taken from Microsoft 365 and Google Workspace for every document and applied before any search runs.

Can managers read employees' questions?

No. Your admins see topics and trends, never anyone's conversations. A person's conversations are theirs alone.

Can AskNeil's staff see our data?

Only if your admin allows it, for a period your admin sets. Every view is recorded with its reason, and your admin can see that record.

For your IT adviser: support access is off by default, granted per company for a limited time, and requires a reason code and ticket reference, enforced on the server and written to an audit log.

Are our records kept apart from other companies?

Yes. Each company's records are kept apart at every level, from storage to search. Your records are never mixed with anyone else's.

How it's protected

Locked when stored, locked when moving, and behind closed doors.

Is our data encrypted?

Yes. Everything travels over an encrypted connection, and everything is stored encrypted. The keys that let AskNeil read your Microsoft or Google data are encrypted a second time, separately.

For your IT adviser: TLS everywhere with HSTS and strict security headers; encryption at rest by the cloud provider; connector tokens additionally encrypted at application level; secrets in a managed secret store.

How are AskNeil's systems protected?

AskNeil's databases have no public address on the internet. There is one front door, the address your team uses, and it is guarded against floods of traffic. AskNeil's engineers reach the systems only through a guarded entrance that records who came in.

For your IT adviser: private networking with no public IPs on databases; a single load-balanced entry point with rate limiting; administrative access only through an identity-aware tunnel.

Your data, your rules

Used for one thing only: answering your team.

Who do we ask about security?

The people who build AskNeil. Write to questions@askneil.ai and one of the engineers who built it will answer, in plain words.

Can we keep certain folders out?

Yes. You choose what stays out at set-up: a private folder, a confidential mailbox, a whole department. You can change it at any time, and what is left out is never read.

What happens to our data if we stop using AskNeil?

Your data is deleted when you leave, as set out in your contract. Your files and emails stay in your own systems throughout; AskNeil keeps only what Neil needs to find answers.

Is our data used to train AI models?

No. Your records are used only to answer your own team's questions. The AI services AskNeil uses process them only to produce answers, and keep them only briefly, as set out in your contract.

Can we try it before connecting our systems?

Yes. A free demo runs on documents you choose and send us, without connecting your Microsoft 365 or Google Workspace. Your documents are deleted shortly after Neil reads them, and everything else goes when the demo closes.

Can AskNeil run on our own servers (on-premises)?

Yes. For companies that need it, AskNeil can run entirely on your own servers, so your records never leave your building. Talk to us about timing, and about the hardware your team would need. What it involves

Try Neil on your own documents.

Book a demo, and we'll set up a private demo with some of your company's own documents.

AskNeil
Search askneil.ai

Searches every page and article on this site.