This guide explains what happens to the content you put into Mindsmith, including uploaded source files, prompts, and the lessons you build. It answers the questions teams most often ask before bringing their own or their clients' material into Mindsmith.
Is my content used to train AI models?
No. Mindsmith does not use your content to train, develop, improve, or fine-tune AI models. This covers everything you add to Mindsmith:
Documents, images, and videos you upload as source material
Prompts and instructions you give the Mindsmith Agent
Lessons, courses, and other content you create
Your content is not shared with third-party AI providers for training or improving their models, and using AI features does not add your content to any training dataset.
Zero data retention with AI providers
Mindsmith uses third-party AI providers to power features such as the Mindsmith Agent. Mindsmith has zero data retention with its AI providers. They process your content to return a result and do not keep it afterward.
Who owns the content I create?
You do. Content you upload to Mindsmith and content you create in it remains your property. Mindsmith does not claim any ownership rights in your content.
Using Mindsmith with client content
If you build training for clients, the same terms apply to their material. Client documents you upload are not used to train AI models and are not retained by AI providers, and ownership stays with you and your client. You can share this article, the Terms and Conditions, or the trust center with clients who ask how their content is handled.
Security documentation
For details on Mindsmith's security practices and compliance documentation, visit the Mindsmith trust center. Content ownership and AI training commitments are set out in the Terms and Conditions.
Reporting a security vulnerability
If you think you've found a security vulnerability in Mindsmith, email the details to [email protected]. Our security team reviews every report sent there. Please send vulnerability reports to that address rather than to [email protected] or through chat.
Include in your report:
What the vulnerability is and what an attacker could do with it
Steps to reproduce it, or a proof of concept
The affected URLs, endpoints, or features
How we can reach you
We acknowledge reports within 2 business days and keep you updated as we work on a fix.
When you test, please don't:
Change, delete, or copy data that belongs to other people
Run denial-of-service attacks or high-volume automated scans
Phish or social-engineer Mindsmith staff or users
Share the details publicly before we've fixed the issue and agreed in writing to disclosure
The full rules, including what's in scope and our response times, are in the Responsible Disclosure Policy on the Mindsmith trust center.
Mindsmith doesn't run a paid bug bounty program. If you'd like, we may credit you once the fix ships.
Learn more
Single Sign-On (SSO): set up SAML sign-in for your organization
Setting up Directory Sync (SCIM) for your organization: add and remove members automatically
Network & Firewall Requirements: the web addresses Mindsmith needs on a restricted network