Corporate FAQ
What a review asks before a seat is opened.
The questions procurement, legal and security teams put to us, with the answers as they stand today. Where a page holds the detail, the answer points at it.
The provider and the engagement
- Who is the contracting party?
ExcBrand.AI is operated by Athirium OÜ, a private limited company registered in Estonia (registry code 17050338, registered office Vesivärava tn 50-301, 10152 Tallinn, Estonia). The terms of service and the privacy policy name the same entity.
Terms of Service- How is an engagement structured?
By invitation. An organization opens one seat per professional. Each seat carries the professional, the terms they choose to own, weekly readings and a monthly measured report. There is no self-service tier and no public sign-up.
- Is the engagement quoted publicly?
No. Nothing is listed publicly. A proposal is written per organization and names the seats, the terms and the review cadence.
Request a proposal- What does the professional have to do?
Approve or adjust, one decision at a time. The professional never operates anything. Nothing is published, sent or changed on their record without an approval, and there is no bulk approval anywhere in the product.
Data and security
- What data do you process?
The public record of the professional (name, role, employer, published work and public profiles), the terms they choose to own, what the AI engines and Google answer about them, and the drafts and approvals produced under the seat. The privacy policy lists the categories and the lawful bases.
Privacy Policy- Where is data stored and how is it protected?
Records live in a managed Postgres database with encryption at rest, reached only over TLS. Every table that holds a client record is isolated per professional with row-level security. Logs carry no personal information. The security and trust page describes the data flow and the controls.
Security and trust- Which subprocessors do you use?
Hosting, the database, the AI engines that are read, the search data providers and the transactional email provider. The current list, with the purpose of each, is maintained on the security and trust page.
Subprocessors- Do you hold a security certification?
Not yet. No certification is claimed. A SOC 2 Type I attestation is on the roadmap and the security and trust page states where it stands.
- Can we sign a data processing agreement?
Yes. Data processing terms are provided with the proposal and follow the privacy policy.
The work and the measure
- Do you publish on behalf of the professional?
Only what the professional has approved, through channels they connected themselves and their official page. Every outbound action is written to a ledger before it is sent, and one that did not happen is visible as unsent.
- What is Standing?
A 0 to 100 measure of how the AI engines and Google represent a professional, composed of four parts in a fixed order: Sentiment, Visibility, Accuracy and Authority. Readings are taken weekly; real movement is measured monthly.
How we measure- Do you guarantee a result?
No. A reading that was not measured is shown as not measured, never as a sample or a zero, and no benchmark is published. The monthly report shows what changed, which engine changed it, and what was done.
- Who owns the content?
The professional. Drafts are written in their voice for their approval, published under their name on their channels, and remain theirs when the engagement ends.
- How does an engagement end?
Either party may end it under the terms of service. Connected channels are disconnected, scheduled work stops, and the record is deleted or returned as the privacy policy describes.
Term and termination
A question that is not here is answered in writing with the proposal.