Skip to content
Contact Support
  • There are no suggestions because the search field is empty.

Haystack AI: Features, Data Use, and Security

Learn how Haystack’s AI tools work, what content they index, and how we protect your data.

What AI tooling does Haystack offer?

Haystack offers two types of AI tooling in the platform.

  • Haystack AI Composition helps content creators generate text content when creating posts, pages, events, and comments. AI Composition is available for all Haystack customers.

  • Haystack AI Search provides context-rich, conversational answers to complex search terms and questions. AI Search is currently available to via an invite-only early access program. If you'd like access to AI search, reach out to your CSM or support@haystackteam.com and they'll help get it enabled in your workspace. 

What content does Haystack AI Search index?

At present, Haystack AI Search indexes content from your workspace’s groups (open, closed, or secret), people directory, and glossary. 

Is Haystack AI powered by a third party?

Yes. Haystack AI has been built in partnership with Google and is powered by Google’s Vertex AI. You can learn more about Vertex AI here. 

Is the service powering the AI functions hosted by you in-house or is it hosted by a third party?

All of Haystack, including our new AI tooling, is hosted on the Google Cloud Platform (GCP). You can learn more about GCP here.

Is Haystack customer data being used to train the AI models?

No. Neither Haystack nor Google use Haystack customer data to train the Vertex AI models. 

How often are Haystack AI models re-trained?

Google trains and updates their Vertex AI models—this training and re-training is not managed by Haystack. You can learn more about Vertex AI here.

Does Haystack AI follow a controls framework such as ISO 27001 or SOC 2?

Yes. Haystack AI is compliant with all of Haystack’s security certificates, including both SOC 2 Types 1 & 2 and ISO 27001. You can learn more here. 

Is data sent to the generative AI platform encrypted-in-transit?

Yes, when a request is submitted to Vertex AI, the data is encrypted in-transit. You can learn more about Google's encryption in-transit here.  

Does Haystack’s AI offering integrate seamlessly into Haystack’s existing security, incident response, and alerting standards?

Yes, our AI tooling is included in all of our existing security documentation, routines, and protocols. By utilizing GCP, Haystack—including AI offerings—benefits from Google's security infrastructure, which includes advanced threat detection and mitigation tools. GCP provides services such as Security Command Center and Cloud Armor, which offer features like anomaly detection, DDoS protection, and real-time security alerts.

Can Haystack customers opt out of using AI tooling?  

Yes! All AI features—both search and content generation—are behind unique back-end feature gates that the Haystack CS team can help enable or disable at any time. If you’d like to disable AI tooling in your workspace, please reach out to your Haystack Customer Success Manager or support@haystackteam.com. 

Can Haystack help with additional questions from my security team?

Yes, absolutely. Please share any additional security needs with your Haystack Customer Success Manager or support@haystackteam.com and we will happily support you.

Where can I share AI feedback and bugs?

We would absolutely love for you to share any feedback, ideas, and issues you encounter. Please share them via your Haystack Customer Success Manager.