Understand the data path
Security architecture, transport encryption, and privacy controls across all SmaxAI routes.
Encrypted Transport & Infrastructure
All client-to-server and gateway-to-provider communications are strictly encrypted using modern TLS 1.3 protocol. User authentication and session tokens are safeguarded via Google Firebase Auth with zero cleartext password storage.
Isolated Server-Side Secrets
All AI model provider API keys (NVIDIA NIM, OpenAI, Anthropic, Google Gemini, xAI) reside securely in server-side isolated runtime environments. No client-side exposure or browser leakage of provider credentials ever occurs.
Zero-Data Retention (ZDR) Routing
For enterprise and Pro model routes, SmaxAI routes queries exclusively through commercial API endpoints configured for zero-data retention. User prompts and responses are processed ephemerally in memory and are never retained for model retraining.
True Incognito & Complete Deletion
Incognito Chat sessions operate completely without database logging, keeping messages strictly within browser memory. Furthermore, users can delete individual conversations or execute a 1-click complete account wipe at any time from Settings.