Security

Knows a lot, but keeps it secret.

Monoshiri AI knows everything about your team, but never lets it leak. Protected by comprehensive security measures.

Data Encryption

All data is encrypted both at rest and in transit. Communications are protected by secure protocols, providing strong defense against man-in-the-middle attacks. Industry-standard encryption ensures the highest level of security.

Domestic Data Centers

All data is stored in data centers within Japan, meeting high security standards. Data never leaves Japan, ensuring full compliance with domestic regulations.

Complete Account Isolation

Data is completely isolated between multiple corporate accounts. Storage and vector search indexes are independent for each company, ensuring no data mixing. This isolation is strictly enforced across all access paths, including LINE integration. Complete account isolation maximizes data security for each company.

Not Used for AI Training

Your data is used solely for service delivery and is never used for AI model training or improvement. We prevent any misuse of data. Use with confidence.

Confidentiality in Terms of Service

No need to sign a separate NDA. Article 7 of our Terms of Service explicitly includes confidentiality provisions, prohibiting unauthorized use of customer data and disclosure to third parties. This provides robust legal protection.

Complete Data Deletion on Cancellation

We provide a 30-day data retention period after cancellation during which downloads are possible. After 30 days, all original files, vector data, and search indexes are completely deleted. Deletion from backups is completed within 90 days of cancellation.

Role-Based Access Control (RBAC)

Assign appropriate permissions based on user roles, ensuring security through the principle of least privilege.

Account Administrator

admin

Administrator account created with the team

User invitation & management
Folder creation
Document add & delete
External integration settings
Billing management
Ask AI

Document Manager

manager

User delegated with document management

Folder creation
Document add & delete
Ask AI

General User

member

Search and view only user

Ask AI only

Technical Measures

WAF (Web Application Firewall) - Protects against common attacks such as unauthorized access, SQL injection, and cross-site scripting (XSS)
DDoS Protection - Comprehensive defense layers against DDoS attacks ensure service continuity
Audit Logs - All API calls and operations are recorded as audit logs for security incident investigation and auditing
Password Hashing - User passwords are encrypted with the latest hashing algorithms, maintaining security even in case of data breaches
Session Management & Token Expiration - Sessions have automatic expiration, minimizing the window for unauthorized use
API Key Authentication & Rate Limiting - API integrations are verified through API key authentication, detecting and blocking abnormal access patterns
API Rate Limiting - A rate limit of 100 requests per minute per user is applied to all API endpoints, preventing abuse and service overload

Compliance

Personal Information Protection Act Compliance - Monoshiri AI is positioned as a data processor and meets all requirements of Japan's Personal Information Protection Act
Rapid Incident Response - In the event of a security incident, we commit to providing initial notification within 72 hours with transparent response
Regular Security Reviews - We regularly review security measures to always protect against the latest threats