To make your demo, Demosmith signs in to your product and records what it sees. That is a lot of access to hand over, so here is exactly what we do with it and with everything we capture.
Running a security review or have a questionnaire to fill in? Book a call or email sales@demosmith.ai.
Your product login
- We use the login you give us only to run the demos you ask for.
- After you enter it, the app never shows it again. It appears as
***. - While the demo runs, your login is replaced with
[redacted]in the activity feed and in anything our AI checks are given to read. - Put your login in the login fields, not in your prompt. A password typed into the prompt looks like ordinary text to us, so we cannot hide it.
Codes and sign-in steps during a run
Sometimes your product asks for a two-factor code or another sign-in step partway through. When that happens, Demosmith pauses and asks you for it.
- Your answer is held in temporary memory, read once, then deleted.
- If it is never used, it expires on its own.
- It is never saved with your demo, and it is never sent to an AI model.
What ends up in your demos
- Your demo shows the screens Demosmith visits in your product, so use sample data for anything you would not want a viewer to see.
- Before an interactive demo goes live, we blank sensitive form fields: passwords, security codes, card and bank details, ID numbers, email addresses, phone numbers, home addresses and similar.
- Only people with the link can see a demo you share. It goes in our public gallery only if you choose to list it.
- When you delete a demo, its links stop working right away, and we delete it from our systems within 30 days.
Encryption
Your data is encrypted in transit and at rest. The app accepts secure connections only, and browsers are told never to connect to it over plain HTTP.
Your Demosmith account and payments
- You sign in with Google, or with an email and password. We reject passwords that are too short, too common or all numbers.
- Payments go through a third-party payment processor. We never see or store your full card number.
AI and your data
We do not train or fine-tune AI models on your data, and the AI providers we work with do not train on it either.
Privacy laws
You have rights over your data under the EU and UK GDPR, Canada's PIPEDA and California's CCPA, including access, correction and deletion. Your data may be processed in the United States and other countries. Our Privacy Policy covers the details.
Security reviews
We help teams with security questionnaires and vendor reviews. We do not hold a SOC 2 or ISO 27001 certificate yet. If your review needs to know how we handle something, book a call and we will go through it with you.
Reporting a security issue
If you think you have found a security problem, email support@demosmith.ai with "Security" in the subject line. Please give us a chance to fix it before you share it publicly.
