AI Security

Overview

We use artificial intelligence in two distinct contexts: internal AI tools that support Xano operations, and AI features made available to our users through the Xano platform. Different data processing practices and controls apply depending on how AI is being used.

Xano maintains governance measures for its use of AI and evaluates AI-related data processing with security, privacy, and responsible-use considerations in mind. Customers should also consider their own security, privacy, and regulatory requirements when choosing how to use AI functionality.

Internal AI Use

Xano uses Anthropic's Claude as an AI subprocessor for certain internal business activities, including assisting our Customer Support team in reviewing and triaging customer requests.

When providing support, these systems may process information relevant to resolving a request, including account, workspace, customer, or end-user data, depending on the issue being investigated. Xano configures these workflows to limit access to information relevant to the support request and does not permit customer data submitted through these internal workflows to be used to train the underlying language model.

Our internal use of AI is governed by our AI Usage Policy and supporting technical and organizational controls, including periodic review of approved AI use cases.

Customers who do not want their workspace data processed by Claude during a support interaction may request this at the beginning of the conversation with Xano Support. Requests handled without AI assistance may require additional manual investigation and can therefore result in longer response or resolution times.

AI Use In Xano

Xano provides AI-powered functionality as part of the Xano platform, including Xano's AI Agent or other available AI features. Use of these features is governed by our AI Terms, which set forth the terms applicable to AI inputs and outputs, third-party providers, data processing, and customer responsibilities.

Xano currently uses third-party providers to support these features, including:

• Google Gemini, which provides the large language model used by AI features in Xano

• Braintrust, which supports analysis, monitoring, and improvement of Xano's AI functionality

Depending on how a customer uses an AI feature, information processed by these providers may include prompts and relevant workspace context required to generate a response. Xano seeks to limit AI-related processing to information appropriate for providing, monitoring, securing, and improving the applicable AI functionality and uses measures such as pseudonymization where supported and appropriate.

AI Model Training

Xano does not use customer AI inputs or outputs for model training without customer consent, as described in the AI Terms. Customers should independently review the applicable terms and privacy practices of any external AI provider they connect to Xano.

Context for AI Features

Providing relevant application and workspace context can improve the usefulness and accuracy of AI-generated responses. However, customers remain responsible for the information they submit to any AI features.

Customers should avoid placing sensitive, confidential, proprietary, or regulated information into AI prompts unless they have determined that doing so is appropriate for their use case, have the necessary rights to process that information, and have implemented appropriate safeguards.

AI-generated responses may also be inaccurate, incomplete, or unsuitable for a particular use case. Customers are responsible for reviewing and validating AI-generated code, logic, recommendations, and other outputs before relying on or deploying them.

Disabling AI Features

Customers with applicable Xano plans can disable AI features through their workspace settings. Disabling prevents the associated features from processing your data through the third-party subprocessors that provide them.

Organizations with security, privacy, or compliance requirements that make Xano-provided AI functionality unsuitable for a particular workload may choose to disable these features.

Connecting Your Own AI or LLM Provider

Xano supports integrations that allow customers to connect third-party AI models, LLMs, or other AI services to their workspace.

Using a customer-selected AI provider can provide organizations with greater control over provider selection, contractual arrangements, model configuration, data handling, and related compliance requirements.

These integrations are configured and controlled by you. Customers are responsible for evaluating the security, privacy, compliance, access controls, credentials, and data-handling practices of any third-party AI service they connect to Xano, as noted in our AI Terms.