Security at SFN AI

1. Our Commitment to Security

Short Form Nation, Inc., operating as SFN AI ("Company," "we," "us," or "our"), builds the intelligence layer that brands and creators trust with their TikTok Shop data. Protecting that data is foundational to our product, not an afterthought. This page describes the technical and organizational measures we use to keep your information safe, and how to reach us about anything security-related.

Security is a shared responsibility. We invest continuously in protecting our platform, and we ask that you help by using strong, unique credentials and keeping your account access confidential.

2. Data Encryption

We encrypt your data both in transit and at rest so that it stays protected whether it is moving between systems or stored on our infrastructure.

• In transit: All traffic between you and SFN AI is encrypted using TLS/SSL. Connections over the public internet are protected end to end.
• At rest: Stored data is encrypted using AES-256, the same standard used across the financial and government sectors.

3. Infrastructure & Network Security

SFN AI runs on established cloud infrastructure providers that maintain industry-recognized physical, network, and environmental controls in their data centers.

• Segmented network architecture with restricted ingress and egress.
• Firewalls and security groups that limit access to only the services that require it.
• Encrypted, access-controlled backups with disaster recovery planning.
• Redundancy across availability zones to keep the service resilient.

4. Access Controls & Authentication

Access to systems and customer data is granted on a least-privilege basis: team members receive only the access their role requires, and that access is reviewed and revoked as roles change.

• Authentication mechanisms and access controls protect every account and internal system.
• Administrative access to production systems is restricted and logged.
• Credentials and secrets are managed securely and never stored in plain text.

5. Application & Product Security

Security is built into how we develop and operate the product, not bolted on at the end.

• Regular security assessments and penetration testing of our systems.
• Secure development practices and code review before changes reach production.
• Prompt patching of dependencies and infrastructure in response to known vulnerabilities.

6. Monitoring & Incident Response

We maintain incident response and breach notification procedures so that potential issues are detected, contained, and communicated quickly.

• Monitoring and logging across our systems to surface unusual activity.
• A defined incident response process for triaging and resolving security events.
• Breach notification procedures consistent with our obligations under applicable law, including the GDPR and CCPA/CPRA.

7. Business Continuity & Backups

Regular backups and disaster recovery planning protect against data loss and help us restore service in the event of a disruption.

8. Our People

Technology is only part of security. Everyone at SFN AI receives training on data protection and security practices, and access to customer data is limited to personnel who need it to operate and support the service.

9. Data Privacy & Compliance

Our security program works hand in hand with our privacy commitments. We process personal data in line with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA), and we honor the data rights described in our Privacy Policy.

For full detail on what we collect, how we use it, and how to exercise your rights, see our Privacy Policy and Cookie Policy.

10. Vendors & Sub-Processors

When we rely on third-party service providers to operate SFN AI, we share only the information necessary for them to perform their function, and we expect them to maintain appropriate security and confidentiality protections. Our use of service providers is described further in our Privacy Policy.

11. Responsible Disclosure

We welcome reports from security researchers and the wider community. If you believe you have found a vulnerability or a security issue in SFN AI, please report it to us privately so we can investigate and address it before any details are made public.

• Email us at security@shortformnation.com with enough detail to reproduce the issue.
• Give us a reasonable opportunity to remediate before public disclosure.
• Do not access, modify, or delete data that does not belong to you, and avoid actions that could degrade the service for others.

We appreciate good-faith research and will work with you to confirm and resolve valid reports.

12. Important Note

Despite the measures described above, no method of transmission over the Internet or electronic storage is 100% secure. While we work hard to protect your information, we cannot guarantee its absolute security. We continuously review and improve our practices as threats and technology evolve.