FAQ
Foundable security and privacy FAQ
Short answers that point to the public security, privacy, and legal pages as the deeper source of truth.
Is Foundable secure and private?
Foundable's public security and privacy pages are the canonical trust sources. Foundable does not train its own foundation models on Customer Content; provider terms are disclosed separately. Integration credentials receive application-layer encryption, protected company routes enforce membership, and security researchers can use the scoped Responsible Disclosure Policy.
Who owns my idea, and could it get stolen?
You retain ownership under Foundable's Terms. No online service can promise that information can never be exposed, so the Security page describes the actual encryption, access, tenant-isolation, logging, and provider controls. Foundable does not train its own foundation models on Customer Content; provider-side terms differ and are stated in the AI Disclosure and provider registry.
Does Foundable use customer content to train AI models?
Foundable does not train its own foundation models on Customer Content. Anthropic and OpenAI publish no-training commitments for business/API data, and feature-specific providers are limited to the scopes described in the AI Disclosure and provider registry.
How does Foundable protect integration credentials?
The public security page says OAuth refresh tokens, API keys, and similar secrets are encrypted at the application layer with AES-256-GCM in addition to database encryption at rest.
How does Foundable handle tenant isolation?
Protected operator-facing company routes authenticate the caller and validate current company membership before returning or changing tenant data. Public, callback, internal, and admin routes use separate purpose-specific guards. The Security page explains the model in more detail.
Where can I review Foundable's privacy terms?
Use the Privacy Policy, Terms of Service, AI Disclosure, Security page, and Responsible Disclosure page for the full public trust surface.
Can security researchers report issues?
Yes. Foundable has a public Responsible Disclosure page for reporting potential vulnerabilities.