Data Security Overview

Data flow is handled differently depending on your plan.

The Managed Plan routes data through Tag servers to secure AI environments in Google Vertex and Amazon Bedrock, ensuring it is never retained or used for training, making it especially well-suited for Protected Health Information (PHI) and more aligned with HIPAA and PIPEDA requirements.

With the BYOK (bring your own key) Plan, you connect directly to your chosen AI providers, following their data security and retention policies, while bypassing Tag servers altogether.

In both plans, data is encrypted in transit using HTTPS. Requests may wait in an encrypted processing queue, particularly for larger workloads in “economy mode,” but are ultimately processed quickly and immediately re-encrypted, ensuring the data is never human-readable.

Managed Plan Data Flow

BYOK (bring your own key) Plan Data Flow

Data Security Matters to Us!

Why We Don’t Use Autonomous AI Agents

Tag is designed to keep the human in control at all times. All AI-assisted processes are initiated, supervised, and verified by users. We do not use autonomous AI agents that can act independently within your system.

AI agents are typically systems that plan and execute actions on their own. While compelling in theory, they introduce real risks in practice, such as misinterpreted intent, unintended action chains, unauthorized access to files, and other unpredictable behavior. In environments handling sensitive, professional, and critical data, these risks are not acceptable.

In Tag, AI may assist with data extraction or generating content, but it never initiates actions on your computer without your express consent. Any desktop operation (such as accessing files in your Windows File Navigator or Mac Finder, or opening a document in a word processor or PDF viewer) is triggered by you clicking a button or menu item. That click executes explicit, traditional Java code to perform the action. The AI is not involved in these actions, and does not decide what to open, move, or modify on your computer.

This design ensures that humans remain fully in control of their desktop environment at all times. Actions are intentional, reflecting our belief that responsible AI should support human judgment and not replace it.

Common Security Questions

  • No. Tag is an AI-assisted tool where you maintain complete control. Unlike AI agents that can autonomously access files, execute commands, or make decisions, Tag's AI features only process data you explicitly provide and require your approval for all actions.

  • No. All file access occurs through standard user-initiated operations. AI never independently browses, opens, or accesses files on your system.

  • AI-Chains are pre-configured combinations of context, prompts, and settings that process data you provide. They're deterministic workflows you control. AI agents, by contrast, can independently decide what actions to take, what files to access, and what tools to use - creating security and unpredictability concerns.

  • Public AI chatbots are consumer tools designed for general use, and using them for professional documentation, especially in healthcare, education, or other professions with protected information, introduces serious data security and privacy risks.

    When you type a prompt into a public chatbot, that content may be retained by the provider on their servers for extended periods. Many providers reserve the right to use your prompts and the responses generated to further train their AI models. Prompts and conversations may also be reviewed by human staff for quality and safety purposes.

    There is typically no protection for personally identifiable information (PII) or protected health information (PHI) that you include in a prompt in a public chatbot. If you paste in a patient name, a student's details, or confidential organizational data to get help drafting a document, that information may be stored, indexed, and associated with your query in ways entirely outside your control. Some providers have experienced data incidents where chat histories were exposed to other users entirely.

    For professional documentation in regulated industries, this matters enormously. HIPAA, PIPEDA, and similar frameworks place strict obligations on how sensitive information is handled. A public chatbot offers no Business Associate Agreement, no audit trail, no access controls, and no guarantees about where your data goes after you hit send.

    In contrast, Tag's infrastructure is purpose-built for professional documentation including user access controls and a built-in audit trail so you always know exactly where your data goes after you hit send (see data flow diagrams above). Our Managed Plan also includes BAAs with the AI vendors we use that guarantee zero data retention and no training on your data.

    Using the right tool from the start is the simplest compliance decision you can make.