SECURITY

Knows a lot, but keeps it secret.

Monoshiri AI answers your visitors from the materials you upload, but never leaks those materials to anyone else. Protected by encryption and data isolation for each organisation.

Data Encryption

All data is encrypted both at rest and in transit. Communications are protected with TLS, and stored data is encrypted using AWS KMS keys. We use industry-standard encryption methods.

Domestic Data Centers

The documents and conversation data you entrust to us are stored in the AWS Tokyo region (data centres within Japan). The models used to generate AI answers also run within Japan. We operate in line with Japanese laws and guidelines.

Data Isolation by Organisation

Data is kept separate for each organisation, so another organisation's materials never appear in your answers. Both file storage and the index the AI refers to are held separately per organisation. This separation applies across every access path, including the LINE integration and the widget.

Not Used for AI Training

Your data is used solely for service delivery and is never used for AI model training or improvement. We prevent any misuse of data. Use with confidence.

Confidentiality in Terms of Service

No need to sign a separate NDA. Article 7 of our Terms of Service explicitly includes confidentiality provisions, prohibiting unauthorized use of customer data and disclosure to third parties.

Data Deletion After Cancellation

We provide a 30-day data retention period after cancellation during which downloads are possible. After 30 days, original files, processed data, and index data are deleted. Deletion from backups is completed within 90 days of cancellation.

ACCESS CONTROL

Role-Based Access Control (RBAC)

Assign appropriate permissions based on user roles, ensuring security through the principle of least privilege.

Account Administrator

admin

Administrator account created with the team

User invitation & management
Folder creation
Document add & delete
External integration settings
Billing management
Ask AI

Document Manager

manager

User delegated with document management

Folder creation
Document add & delete
Ask AI

General User

member

Search and view only user

Ask AI only

TECHNICAL MEASURES

Technical Measures

WAF (Web Application Firewall) - Protects against common attacks such as unauthorized access, SQL injection, and cross-site scripting (XSS)
DDoS Protection - Comprehensive defense layers against DDoS attacks ensure service continuity
Audit Logs - All API calls and operations are recorded as audit logs for security incident investigation and auditing
Password Hashing - User passwords are encrypted with the latest hashing algorithms, maintaining security even in case of data breaches
Session Management & Token Expiration - Sessions have automatic expiration, minimizing the window for unauthorized use
API Key Authentication & Rate Limiting - API integrations are verified through API key authentication, detecting and blocking abnormal access patterns
API Rate Limiting - A rate limit of 100 requests per minute per user is applied to all API endpoints, preventing abuse and service overload

COMPLIANCE

Compliance

Personal Information Protection Act Compliance - Monoshiri AI is positioned as a data processor and meets all requirements of Japan's Personal Information Protection Act
Rapid Incident Response - In the event of a security incident, we commit to providing initial notification within 72 hours with transparent response
Regular Security Reviews - We regularly review security measures to always protect against the latest threats