Home / AI and security
How I use AI, and how I protect your business
AI is part of how I build. The people, the decisions, and the responsibility for what I deliver stay with me.
Where AI helps
I use AI to move faster on the parts of a project that take hours by hand, so more of our time goes to what's specific to your business.
- Understanding your business. Research on your goals, your market, and your competitors, so I start from where you actually are.
- Making sense of your workflows. Mapping how work moves through your business today, across the tools you already use.
- Planning the build. Every project starts with a written plan: what we know, what we don't, and the boundaries the system needs to respect.
- Building and testing. Writing, reviewing, and refining the code and content behind what I deliver.
I run my own business on these same systems. I only bring you approaches I've used myself.
What stays human
AI is a tool I direct. It doesn't make decisions about your business.
- Judgment. I decide what gets built, how it works, and what gets cut. I review AI output before it reaches you or your systems.
- Relationships. You work with me. Conversations, recommendations, and check-ins come from me directly.
- Accountability. I'm responsible for everything I deliver, however it was made. If something isn't right, it's mine to fix.
- You stay in charge. The systems I build keep a person in charge of the decisions that matter to your clients and your business.
The tools I use
I work mainly with established AI providers, chosen for quality and how they handle data.
- Claude, by Anthropic. My primary tool for planning, writing, and building.
- Gemini, by Google. Used mostly for research.
- Smaller, specialized tools for specific tasks when they're the right fit.
The tools change as better options come along. My standards for using them don't.
Your information
Your business information is confidential, in AI tools and everywhere else.
- My AI accounts are set so your information is never used to train AI models.
- I share only what a task needs. Passwords, payment details, and your clients' personal or health information stay out of AI tools.
- Research on your market and competitors uses public information.
- Your systems, data, and accounts belong to you. When our work ends, you keep them.
Where your systems and data live
Where I can, I build inside your own accounts. When I host something for you, your code, website, and database each get their own project, never shared with another client.
Your data: Supabase
Your database runs on Supabase, which holds a SOC 2 Type 2 audit report.
- All data is encrypted, both while stored and while moving between systems.
- Paid databases are backed up daily.
- Supabase runs regular third-party penetration tests.
- Access is role-based, so each person sees only what their role needs.
Your website: Vercel
Your site is hosted on Vercel, which holds a SOC 2 Type 2 attestation and ISO 27001 certification.
- Traffic to your site is encrypted, and stored data is encrypted at rest.
- Malicious traffic and denial-of-service attacks are detected and blocked automatically.
- Vercel runs regular third-party penetration testing.
My access to your data
I don't read, use, or share your records. I work in your database only to build and maintain it, like adding a new field you've asked for. You can export your data directly from your platform at any time, without going through me.
Uptime and outages
I monitor the platforms behind your systems for downtime. If an outage affects your business, I'll let you know what's happening and what it means for you.
Guardrails in what I build
When a system I build for you uses AI or automation, the boundaries are set before anything goes live.
- We agree up front on what the system can do on its own and what needs your sign-off.
- Anything that speaks to your clients in your name is reviewed by you before it's turned on.
- I tell you plainly where AI is working inside your systems. Nothing runs in the background without your knowledge.
- I test with you before launch and adjust based on how you actually work.
An example
Take an intake form. A new submission doesn't move forward on its own. You review it, approve it, and move it to the next stage.
If something changes, you can go back, reevaluate, and update your answers. The system supports your decision. It doesn't make it for you.
Questions
If you'd like to know more about how AI is used on your project, ask me. I'm happy to talk it through at consultwithatwist@gmail.com.
I review this page as my tools and practices change. Last updated October 15, 2026.
Want to talk it through?
Twenty minutes, free. You tell me what's stuck. I tell you honestly whether I can help and what it would cost.