Security and trust
Where your data lives, who processes it, and what Ziply never keeps.
Where your data lives
Ziply runs on Amazon Web Services in the United States. Data is encrypted in transit and at rest. Ziply's platform has been reviewed against the AWS Well-Architected Framework.
What Ziply never keeps
Call recordings
Ziply keeps the evidence it draws out and short, redacted quotes, with a link back to your recorder for the full conversation. The recording itself is never stored.
Passwords and login credentials
Ziply doesn't store them. Connected accounts and tools, from LinkedIn, Gmail and Outlook to your CRM and analytics, use each provider's own sign-in.
Card numbers
Payments are handled by Stripe. Ziply never sees your card number.
How your data is handled
Ziply uses the commercial APIs of Anthropic (Claude), OpenAI (ChatGPT) and Google (Gemini) to process content and analysis. Figures drawn from your internal documents are held back from publishing until someone approves them. AI Crawler Analytics reads your CDN or server logs — there's no tracking script on your site.
Access
Every package includes unlimited seats. Scale adds single sign-on.
Retention and deletion
How long your history is kept depends on your package: 90 days on Free, 13 months on Signal, 24 months on Core, 36 months on Growth, and unlimited on Scale. If you cancel, your data is kept for 30 days in case you come back, then deleted.
Subprocessors
| Provider | What it does |
|---|---|
| Amazon Web Services | Hosting and storage |
| Anthropic | AI processing (Claude) |
| OpenAI | AI processing (ChatGPT) |
| AI processing (Gemini) and business email (Gmail) | |
| Mailgun | System email delivery |
| Stripe | Payments |
| Unipile | Connecting LinkedIn accounts |
Certification
Independent security certification is in progress.
Report a security issue
Frequently asked questions
On Amazon Web Services in the United States, encrypted in transit and at rest.
No. Ziply keeps the evidence it draws out and short, redacted quotes, with a link back to your recorder for the full conversation.
Anthropic (Claude), OpenAI (ChatGPT) and Google (Gemini), through their commercial APIs.
It's kept for 30 days in case you come back, then deleted.
Not yet. Independent security certification is in progress.