Is my business data used to train AI models when I use Corvana?
No. Corvana does not allow your business data to be used to train AI models. Two protections combine: first, the AI Data Firewall masks confidential data (business names, ABNs, financials, customer details) before any request reaches an external model; second, the underlying AI models are accessed under enterprise/API terms where customer inputs are not used to train the provider's models. Your data stays yours, stays masked, and stays in Australia.
Key facts
- AI providers used under no-training enterprise terms
- Confidential data masked before it ever leaves Corvana
- Australian data residency — hosted on AWS's IRAP PROTECTED Sydney region
- Full audit trail of every AI interaction
Two layers of protection
The first layer is contractual: the AI models Corvana uses are accessed under terms where your prompts and data are not retained for, or used to, train the provider's models. The second layer is technical and is the one we control directly: the AI Data Firewall strips out identifying and confidential information before a request is ever made, so even the masked prompt contains no real business identity or exact financials.
Defence in depth, not a promise
Privacy policies can change, so Corvana does not rely on a third party's promise alone. Because masking happens inside Corvana before anything is sent, your confidential data is protected by design — not just by agreement. Combined with Australian data residency and AES-256-GCM encryption, this gives you a verifiable privacy posture rather than a marketing claim.
The question every SMB should ask
Before any tool touches your financials, you should know whether your data trains someone else’s AI model. With Corvana, your business data is used to serve you insights — not to train third-party public models. It stays your data.
What to check in any AI tool
Read the data-use clause, not just the marketing. Look for explicit statements that your data is not used to train foundation models, that it is not shared with other customers, and that you can export or delete it. Corvana is built to meet that bar for Australian businesses.
Frequently asked questions
What if an AI provider changes its data policy?
Your protection does not depend on it. Corvana masks confidential data before it is ever sent, so identifying details and exact financials are not exposed regardless of a provider's retention policy.
Where is my data stored?
In Australia — MongoDB Atlas hosted on AWS's Sydney region, which is independently assessed under the ACSC IRAP framework at the PROTECTED level.
Can I remove my data?
Yes — your data remains yours; you can export it, and it is not used to train public AI models.
