Data Sovereignty and Security in Kaituhi
Kaituhi is the only Aotearoa based automatic speech transcription tool. It's used by academics, researchers, professional studios, and marae to help transcribe the voices of Aotearoa New Zealand. If you have specific requirements around data sovereignty, security, or ethics, please get in touch with us so we can assist you.
Where is my data stored?
Aotearoa New Zealand
All data in Kaituhi is stored in Aotearoa New Zealand. No content you upload into Kaituhi is sent off-shore for storage.
Where is my data processed?
Aotearoa New Zealand
All content you upload into Kaituhi is processed in Aotearoa New Zealand. We train, build, and run our own machine models (aka "Artificial Intelligence" models). When we process your data e.g. for automatic speech transcription, your data stays in Aotearoa New Zealand. We are the only provider for automatic speech transcription that stores AND processes your data in Aotearoa New Zealand.
What happens after I delete my data?
Data may be retained for up to 90 days, unless otherwise arranged.
When you delete content from Kaituhi or when you delete your account, all your data is immediately deleted from Kaituhi and no one can readily access the data. For disaster recovery purposes, we keep backups of our databases and the audio files uploaded to Kaituhi. Those backups are kept for up to 90 days to ensure that, upon accidental deletion or a disaster, we are able to recover your data and content. If you require stricter rules around data retention, please get in touch with us.
Who can access my content?
Only people in a Team can access content in that Team.
When you sign up to Kaituhi as an individual, only you can access your content unless you add more users to your account and add those users to your team. Anyone within a Team can access all content in that Team's Folders.
Te Hiku Media may provide technical support which allows us to see some aspects of your data such as the names of your Workspace, Teams, and user accounts. All sensitive information is either encrypted and we don't know what they are (e.g. your passwords) or the data is obfuscated to prevent unauthorised viewing of your content while support is provided (e.g. your transcripts).
Is my data used to train AI?
No.
We do not use any data to train or improve our models unless we have been given specific permission to use that data and we have the rights to use that data for the purpose of training machine models. This is the case for all the data we've used to train the models used in Kaituhi. All our data is ethically sourced. We do not steal data. Even if data is publicly available, we will seek permission before accessing it. This is contrary to the industry standard of scraping all data accessible via the internet.
Is Kaituhi Secure?
Yes, all data and communications are encrypted in transit using industry standards.
All traffic into Kaituhi is secured with TLS encryption, so all data in transit is encrypted. We don't encrypt all data at rest except for sensitive data such as passwords. If you require audio content and/or transcripts in Kaituhi to be encrypted at rest, please get in touch with us.
All data stored in Kaituhi is protected by industry standards. Our Aotearoa based cloud provider is ISO 27001 certified ensuring high levels of security for the data and services we host there. No one but authorised personnel have access to the systems that run Kaituhi. So while audio files you upload aren't encrypted at rest, no one but you and the people you authorise will be able to access those audio files.
Do you support multi-factor authentication?
Yes, we support pass keys and temporary one time passwords.
Multi-factor authentication (MFA) is available for all users and they can set this up in their account page. Kaituhi also allows you to enforce MFA for all accounts in your Workspace, ensuring each user's account is highly secure.