TRUST

Security, privacy and reliability.

Where the Nutrition AI API and EasyAI run, how they protect and retain your data, which providers process it, and how reliably they answer.

Read the security package

99.9%: of Nutrition AI API calls answered without a server error, last 30 days
Google Cloud: us-central1, managed with DuploCloud
Zero Data Retention: opt-in on Growth and Pro, with no-training providers only
Your choice: of request-log retention: none, 7 to 365 days, or indefinitely

Data and privacy

Zero Data Retention (No-Train Mode): Opt-in account setting on Growth and Pro. When on, AI requests go only to providers contractually bound not to log or train on them: models on Google Vertex AI, including Gemini and Anthropic Claude, and OpenAI GPT text models sent with storage turned off. xAI, speech transcription, video generation and image models outside Vertex are unavailable, including as fallbacks; a request for a model that isn't eligible is refused or moved to an eligible one.
Run-log retention: Keep request logs for 7 to 365 days, indefinitely, or not at all. With logs off, only usage numbers (model, tokens, time) are kept. Expired logs are deleted daily.
Processing and storage locations: Servers and databases are in the United States (Google Cloud us-central1). AI requests go to the model provider's endpoints, which may process them outside the United States.

Security

Encryption: Public endpoints are served over TLS with Google-managed certificates. Data at rest in Passio's databases and storage is encrypted by Google Cloud.
API keys with expiry: Up to five active keys per account, each with an expiry date. EasyAI keys can also carry a monthly token limit.
Staff access: Passio staff can open a customer's EasyAI account only for a stated reason, for at most 60 minutes, without access to billing or admin tools, and every session is audited.
Audit logs: Every AI call is logged with the account, function, model, privacy settings, tokens and time, without the request content. Plan, privacy and retention changes are audited.
Credentials: Model-provider credentials are kept in Google Secret Manager, and services reach Google Cloud through workload identity rather than stored keys.

Infrastructure and reliability

Where Passio runs: Passio's services run on Google Cloud, in Kubernetes Engine and Cloud SQL for PostgreSQL, in the us-central1 region (Iowa, United States), managed with DuploCloud.
Compliance-ready infrastructure: Passio's infrastructure is managed with DuploCloud, which applies SOC 2 and HIPAA security controls to the infrastructure it provisions. This is not a SOC 2 report or a HIPAA certification for Passio.
High availability: At least two copies of each EasyAI service run at once, scale with load, and deploy without downtime. Database backups run automatically.
Model failover: Model health is tracked continuously. When a model fails or slows down, calls retry or move to a similar healthy model, and Passio is alerted when a model goes down.
Measured reliability: 99.9% of Nutrition AI API calls were answered without a server error over the 30 days to November 3, 2026. Client errors, such as bad input or an exhausted plan, aren't counted against it.

Support

Support coverage: Community Slack on Starter; dedicated channel on Growth; enterprise support on Pro.

Subprocessors

Providers that process customer data for the Nutrition AI API and EasyAI. With Zero Data Retention on, AI requests go only to Google Vertex AI and to OpenAI GPT text models with storage turned off.

Provider	What it does for Passio
Google Cloud	Hosting, databases and storage, and AI models served through Vertex AI, including Gemini and Anthropic Claude.
DuploCloud	Manages Passio's Google Cloud infrastructure.
OpenAI	GPT models, speech transcription and text embeddings.
xAI	Grok models, when an account or route uses them.
Google Firebase	EasyAI sign-in.
Stripe	Subscriptions and payments.
SendGrid	Account and transactional email.

Need more detail?

The security package is public: controls, measured reliability, and direct answers, including what Passio does not claim. A signed DPA, or a questionnaire on your own form, is arranged by email. The Privacy Policy and Terms of Use apply to every account.

Read the security package

Last reviewed 2026-10-22