Trust

Trust center

Everything a security or procurement review asks for, on one page, including what we do not have yet.

SecurityWhat leaves the device and what does not, model protection, enterprise controls. Read

PrivacyController, data, legal bases, retention, transfers and your rights. Read

SubprocessorsEvery provider that touches personal data, with a change notice for SDK customers. Read

Data processing agreementOur DPA with the Standard Contractual Clauses. [DPA PDF PENDING COUNSEL] Until it is posted, email privacy@yoob.com.

Acceptable useConsent, impersonation and the uses we refuse, including from paying customers. Read

Companion safetyAI disclosure, crisis protocol and age rules. Read

AI transparencyHow characters disclose they are AI, and what output marking exists. Read

Responsible disclosuresecurity@yoob.com, acknowledged within one business day. security.txt

StatusLive checks of the website, console, TTS and character CDN every minute. status.yoob.com

Certifications

We are not SOC 2 certified. We plan to start a SOC 2 Type I audit in [TARGET QUARTER] and will post the report date here. If certification is a hard requirement today, tell us; we will share our controls in writing.