Secure AI by Design: HackerOne's Approach to Data Confidentiality with Hai

Hai is HackerOne’s AI security agent integrated into the HackerOne platform to help security teams summarize reports, prioritize risks, and automate workflows while preserving data privacy and human oversight. The document emphasizes that Hai runs on HackerOne’s AWS infrastructure, follows strict access controls (responses limited to user-authorized data), complies with ISO 27001, SOC 2, FedRAMP, and GDPR, and does not use customer organization data or prompts to train GenAI models.