Product · Data & security
Your field data, and who can see it.
What we commit to, how access works, and what is not in place yet. Every line here matches our privacy policy, our terms, or the system’s own code and configuration.
Your data stays yours
You keep ownership of the farm data and files you provide. Aiterra stores and processes them to run the service.
Source: Terms
Not sold
We do not sell your data.
Source: Privacy policy
Not used to train public models
Your private farm data is not used to train public AI models.
Source: Privacy policy
Access
Who can see a field.
You decide who is in your account and what you share outside it.
- Each account has its own members and roles. A person sees only the accounts they have been granted.
- An advisor sees a grower’s fields only when the grower is on the advisor’s client list, and client accounts are kept separate.
- A share link covers one item: a report, a prescription, a soil test order or a field.
- Share links expire, after 30 days by default and at most a year. You can revoke a link at any time, and it stops working at once.
- Anyone holding an active link can view the item it covers, so send it only to the person who needs it.
How it is run
Infrastructure and practice.
The controls in place today.
| Hosting | Google Cloud, with data stored in the United States. |
|---|---|
| In transit | Connections use HTTPS, and database connections are encrypted. |
| Sign-in | Passwords are stored as one-way bcrypt hashes. Repeated failed sign-ins lock the account, and sign-in attempts are rate-limited. |
| Backups | Daily database backups, with point-in-time recovery. |
| Access records | Access to account data is written to an audit log. |
| Every code change | Static security analysis, secret scanning and a dependency audit run on every change. A check fails any new API route that lacks authentication or an account guard. |
AI providers
What the language model sees.
- To write an answer, Fieldhand AI sends the relevant context from your conversation and field records to large-language-model providers, under their terms.
- Rates and conversions are computed by Aiterra’s own tools, not by the language model.
Deletion
Deleting your account.
- Ask to delete your account from account settings or by email.
- A deletion request can be cancelled for 90 days. After that, the account’s data is deleted.
- Limited records may be kept where the law or security requires it.
Not yet
What we don’t claim.
These are not in place today. We will say so here when they are.
- An independent security certification, such as SOC 2.
- Two-factor sign-in.
- A one-step export of all your data. Reports, prescriptions, field zones and documents download one at a time.
Read the privacy policy and terms. Security questions or reports: support@aiterra.ag.
Questions from your security team?
We’ll walk through how your data is handled.