SchneeAI is built for teams that need to operate AI features the same way they operate the rest of their product: with explicit controls, structured records, and reviewable decisions. This page describes the controls and practices we ship today.
Access control
Every request to SchneeAI carries a service, tenant, and user identity. The platform uses that identity to enforce access decisions — who can call which model, view which logs, edit which prompts, and change which policies. Administrative operations require elevated roles; routine reads are scoped to the caller’s tenant.
Tenant isolation
Usage, prompts, logs, and controls are separated by tenant, service, and environment. A request from one tenant does not surface in another tenant’s views, and cross-tenant access is refused by default rather than granted and then filtered.
Audit logging
Requests, prompt changes, policy updates, and operational actions produce structured audit records. Each record carries the actor, the target, the action, and a timestamp — so reviewers can reconstruct what happened, when, and by whom.
Configurable data controls
- Data retention — configure how long usage and metadata are kept.
- PII handling — support safer handling of sensitive user data through configurable policies.
- Vault — raw prompt and output content is stored separately from operational metadata, with its own retention and access controls.
- Human approval flows — add review steps for high-risk AI workflows.
Encryption
Data is encrypted in transit using TLS. At rest, SchneeAI applies application-layer controls on top of the underlying storage encryption for sensitive artifacts such as raw prompts and outputs.
Incident process
When something goes wrong — a misrouted request, a budget overshoot, a prompt rollback — the audit trail and structured usage make it possible to find the source quickly. Incident responders can scope by service, tenant, user, and time range, and export the relevant records.
Responsible AI
SchneeAI is built to support responsible AI practices: observable behavior, configurable safety events, human review where it matters, and retention controls that let teams limit what they keep. We treat responsible AI as an operating discipline, not a marketing claim.
Reporting
Found a security issue? Email hello@schneeai.com with details. We respond during business hours and triage reports seriously.