Security and privacy

Your Nysroc workspace data is hosted in Canada. The exception is managed Nysroc AI, which runs on DeepSeek's API and is processed in China: you can turn it off, use your own AI key or set the workspace Canada-only. Every sign-in and change is logged, and Nysroc staff access your data only for a recorded support reason. Privacy questions: privacy@nysroc.com.

• Where data lives: your workspace, website, files and backups are hosted in Canada. Managed Nysroc AI is the exception: it runs on DeepSeek's API, in China. Turn AI off, use your own key, or set the workspace Canada-only to keep AI processing out of China. Managed AI is on by default.
• Health data: do not put health information into Nysroc AI.
• Payments: your card is entered only on Stripe's page; Nysroc never stores card numbers.
• Sign-in: one login with optional two-step verification.
• Audit: sign-ins, role changes, billing, domains, integrations, exports and assistant actions are recorded in a tamper-evident log. Owners and admins see it in the Activity log.
• Staff access: only with a recorded reason and ticket; you see "Nysroc Support" and the reason in your Activity log.
• Support tickets are kept for 3 years.
• Where Nysroc is offered: Canada and the United States.
• Privacy contact: privacy@nysroc.com.

Think your account was accessed by someone else? Change your password, turn on two-step verification, check your Activity log, and ask the assistant to open an urgent security ticket.