Joist AI demonstrates strong data security practices with SOC 2 and ISO 27001/02/17/18 certifications, Zero Data Retention agreements with LLM providers, and clear privacy policies limited to their marketing website. While lacking detailed terms of service for their software platform, their documented security commitments and enterprise-focused approach suggest a relatively low-risk profile for professional use in the AEC industry.

AI Transparency Facts

Input Data Ownership

Moderate Risk

No explicit statements found regarding user ownership of input data. The privacy policy applies only to the marketing website, not the software service, creating ambiguity about data ownership in the actual AI platform.

Confidence

20%

Output Data Ownership

Moderate Risk

No clear statements found about who owns AI-generated outputs. The available policies focus on marketing website data rather than the AI service outputs.

Confidence

15%

Training Data Usage

Low Risk

Joist AI has Zero Data Retention agreements with LLM providers ensuring user data is not stored or used for model training. Data is deleted immediately after task completion.

Confidence

90%

Data Retention & Deletion

Low Risk

Zero Data Retention policy ensures immediate deletion of data after use. Marketing website data is kept only as long as necessary for stated purposes.

Confidence

85%

Third-Party Data Sharing

Moderate Risk

Marketing website may share data with business partners and affiliates for promotional purposes. No clear information about third-party sharing for the AI software service itself.

Confidence

40%

Opt-Out Rights

Low Risk

Clear opt-out mechanisms provided for marketing communications and targeted advertising. Users can opt out of cookies and request data deletion.

Confidence

80%

Compliance & Certifications

Low Risk

Joist AI holds SOC 2 and ISO 27001/02/17/18 certifications with successful second audit completion. GDPR compliance mentioned with specific data subject rights enumerated.

Confidence

95%

Model Explainability & Auditability

Moderate Risk

Trust Center mentioned providing transparency about security practices, but no specific information about AI model explainability or audit capabilities.

Confidence

30%

Security Practices & Breach History

Low Risk

Strong security practices with SOC 2 and ISO certifications, encryption protocols, continuous monitoring, and access controls. Trust Center available. No breach history mentioned.

Confidence

85%

Enterprise vs. Consumer Risk Delta

Moderate Risk

No information found distinguishing between free and paid tier data handling. The platform appears focused on enterprise AEC clients but tiers are not explicitly addressed.

Confidence

20%

Human Review of User Inputs

Moderate Risk

No explicit policy found regarding human review of user inputs in the AI service. Privacy policy only covers marketing website activities.

Confidence

15%

Regulatory & Litigation Exposure

Low Risk

Standard legal compliance language present. Company subject to FTC authority and will disclose data when legally required. No litigation or incidents mentioned.

Confidence

70%

PII & SPI Data Inventory

Moderate Risk

Marketing website collects standard PII including IP addresses, device data, and location. Some SPI may be collected through cookies and third parties, but the AI service data collection is not documented.

Confidence

50%

You've read all 15 risk ratings for Joist AI. Create a free account to see the exact policy wording behind each rating.