Vest works with the most sensitive documents a contractor has. This page says, in plain language, what we do and do not do with them.
Vest is made and operated by Vest AI, Inc., a Delaware corporation based in San Jose, CA 95126. Write to hello@vest.build with any question about this page.
Documents you upload or sync are visible to your company and to no other customer. They are used to answer your team's questions and to investigate a problem you report. To run the service we send page images and extracted text to the hosting and AI vendors listed on our security page, and only for that purpose.
Your documents, questions and answers are never used to train AI models, by us or, under their published terms, by any AI provider we use. Vest does not train models. Each provider's terms are quoted, with a link, in the detailed subprocessor list in our pilot packet, so you can read them.
Vest keeps the questions asked in your company, the passages it retrieved, and the answers it gave, so we can find and fix wrong answers. Those records live in your company's database. The answering step is also traced in a service hosted in the United States that receives the question, the passages and the answer, and never a page image. Sign-in events and admin actions, including the network address you sign in from, are kept in an activity log. If you send feedback from the product, the founders receive your email, your comment, the question and answer you flagged, and any screenshot you attach.
Every person on your team has their own account, and people see only the projects they are added to. Remove someone and their access ends immediately, for them and for the AI answering their questions.
Sign-in runs through an identity provider. Vest stores your name, email address, company membership and role, and never a password. The product uses cookies to complete sign-in and keep you signed in. The product and the mobile apps run no advertising trackers, and we do not sell personal information or share it for advertising.
Your files, your database and its backups are stored in Amazon Web Services in Northern Virginia. An AI provider may process a request outside the United States. The detailed subprocessor list in our pilot packet says which providers commit to a region.
Your documents are yours. If you stop using Vest, your data is deleted on request: your documents, your database and stored files are removed from live systems right away, with copies in database backups expiring within 7 days and stored file versions expiring within 30 days. Records of questions and answers kept for quality review are deleted with them. Security audit logs, which hold no document content, are kept for 400 days. Anything Vest compiled for you, like schedules and exports, stays with you.
Email hello@vest.build to ask for a copy of the data we hold about you or your company, or to have it deleted. A founder answers.
The pilot request form collects only what you type into it: your name, company, email, and anything you choose to add. The form posts to a form service, we own the responses, and we use them to respond to you and for nothing else. This site does not run advertising trackers.
Vest is built for businesses and is not directed to children under 13. If you believe a child has given us personal information, email hello@vest.build and we will delete it.
When this page changes, we update the date at the top. Pilot partners hear about material changes from us directly.