Security
- Frequently Asked Questions about Data Handling and AI Generation in Teachme AI
- Does Teachme AI use data for model retraining?
- Is there a mechanism to prevent easily guessable passwords?
- Can I set restrictions on email content or file attachments?
- You mentioned that you use AWS, but how is the responsibility boundary defined in cloud service provision?
- When operating in the production environment, do you manage work request records and verify operation logs?
- Can you disclose the service architecture diagram?
- Are you using a server certificate?
- Is there a possibility that data will be used secondarily without the owner's permission?
- Are you implementing measures to defend against spam emails, etc. (introduction of dedicated tools, coordination with virus countermeasures)?
- Are you taking appropriate measures against internal threats?
- What measures are taken to prevent the leakage of encryption keys used internally in the service?
- What measures do you take for system configuration and settings information management?
- What measures do you take to detect system abnormalities early?
- As a service user, what security measures can I apply to account management?
- How is the safety of production system changes ensured?
- Do you use services like NTP for log time synchronization?
- Is data input and output to the system properly validated and sanitized?
- Will user-created data be deleted after service cancellation?
- Are login passwords stored in an encrypted state within the system?
- How is the security of networks and accounts used for maintenance as a service provider ensured?
- Are test and development environments operated separately from the production environment?
- Is important information handled within the service stored in a private network area that cannot be directly connected to the Internet?
- Are you clearly separating dedicated and shared areas for each customer company?
- As a service user, can I check various access logs and operation logs for the service?
- Do you have antivirus software installed on your servers?
- As a service user, what security measures can I apply to account login?
- Are there established procedures for service recovery in case of trouble?
- Is the stored data encrypted?
- As a service user, what security measures can I apply to access the entire service?