Trust & Security
Thousands of companies trust Watermelon to build secure, compliant AI Agents that protect data and privacy. We ensure your AI Agent meets the highest security standards.
Do you have a question about security at Watermelon?
GDPR-compliant AI Agents
Privacy comes first. Watermelon complies with the requirements of the General Data Protection Regulation (GDPR). Your customer data is processed, stored, and protected with the utmost care.
Full compliance with GDPR legislation
Data is only used to improve your AI Agent, never to train models
Clear and transparent policies available
Advanced data encryption
All customer data at Watermelon is encrypted according to industry standards, both in transit and at rest. Your information is always protected against unauthorized access.
End-to-end encryption for maximum security
Regular audits and penetration tests to stay secure
Encryption keys managed in Europe, compliant with GDPR and ISO 27001.
Frequently Asked Questions about Security
Everything you need to know about how we handle privacy, security, and compliance.
Is Watermelon GDPR compliant?
Yes, Watermelon complies with GDPR. See our Privacy Policy for more information.
Does Watermelon use my data to train AI models?
No, we use Retrieval-Augmented Generation (RAG) to generate answers. Your data is not used to train AI models.
Can model providers like OpenAI or Google use my data?
No, Watermelon uses their APIs and we do not participate in their data sharing programs. Your data is not used to train third-party models.
Who can use my AI Agent?
Your AI Agent is private by default. If you want to share or embed the agent on your website, you must first publish it.
On which servers does Watermelon run?
Our database and application run on Google Cloud infrastructure (Europe-west-1b), MongoDB, and Pinecone.
Does Watermelon encrypt data?
Yes, all data is encrypted in transit and at rest with industry-standard encryption.
Which subprocessors does Watermelon use?
We work with several subprocessors to deliver our services. You can find an overview on our subprocessors page.
Is Watermelon ISO 27001 certified?
Yes, Watermelon is ISO 27001 compliant. Read more on our trust center.
Does Watermelon have a bug bounty program?
Yes, we have a private Bug Bounty program. Report vulnerabilities via bug.bounty@watermelon.ai.
Where can I find more information about security and compliance?
You can find detailed information in our trust center, including documentation and the measures we take to protect your data.