Alright. Perfect. It's eleven o one, so we'll start our presentation. Hi, everybody. Thank you so much for joining us for today's webinar on enter security and AI. I'm Patricia Pitzy Li Yang, and I specialize in Blackwater Marketing here at Kobeo. I'm so happy to be hosting session today with the incredible Frank Burst, a senior product manager here at our company. Together, we're going to show you how Provo's security practice and philosophy keeps your data and users safe without compromising on innovation. We're going to cover Koveo's robust enterprise level security capabilities that differentiate us from the rest of the competition. We'll also take a quick look at Kobayo's latest generative AI product relevant generative answering and explore how it solves some of the challenges created by chat, GPT, and gen AI. We're also going to end off our webinar with a short Q and a. So please feel free to send us your questions along using the Q and a portion of your screen. Today's webinar is also being recorded. So please expect a copy of the recording in the twenty four hours. With that out of the way, welcome to our webinar on enterprise security and AI. We'd like to start off by sharing that Coveo has been recognized as the winner of the two thousand twenty three cyber security award for most innovative digital digital experience cloud native AI platform by wealth and finance international magazine. Everybody knows that security is part of Koveo's DNA, and this award really reinforces Cobio's leadership in enterprise grade security and privacy. Now being secure by design is how we innovate. Taking security to heart is something that Cobail loves to do before incidents happen, especially with the release of our new generative answering capability. In this digital era, the importance of security really can't be overstated. With the evolving landscape of privacy regulations, the death of third party cookies, and the rising popularity of generative AI. Companies are facing the challenge of balancing data protection, privacy, and compliance all while delivering digital experiences. According to Gartner, sixty eight percent of executives believe that the benefits of generative AI outweigh the risks. However, maintaining security and accuracy are critical to mitigate hallucinations and data leaks. But here's the good news. Security worries don't have to slow down innovation at your company. By understanding the distinctions between security, privacy, and compliance, companies can navigate these challenges while driving forward with innovative solutions. So let's start with this presentation with the definition of security privacy and compliance to make sure that we're all on the same page. Security and TLS implementing measures to protect against unauthorized excess, damage, or misuse of information, systems, or assets. This involves establishing robust controls and safeguards to ensure the confidentiality, integrity, and availability of your data. Privacy on the other hand focuses on individuals right to keep personal information confidential and secure. Shealing it from unwanted intrusion or disclosure. So this means respecting privacy and adhering to privacy policies obtaining consent when necessary and employing security data handling practices. Finally, compliance involves following laws, regulations, and internal policies to ensure the ethical and legal practices within an organization. By complying with regulations, companies promote transparency, build trust with customers, and avoid potential legal consequences. This is where Coveo's secure by design approach comes in. Coveo recognizes the importance of safeguarding data and privacy from the very foundation of our solution. Being secure by design means that Cobail integrates security practices into every aspect of our platform. Our platform is all inclusive, So our security practices really do apply to everything that we do. So let's quickly go over the seven key principles of secure by design. Number one is proactive approach. Coveo addresses security early in the design process, identifying and mitigating risks before they become incident. We also practice defense in-depth where multiple layers of security are implemented to provide robust production against potential threats. We also do least privilege, which is granting minimal access privileges to users to minimize the acts at the impact and breaches at of the to minimize the impact of breaches and limit exposure to sensitive data. We also left to practice continuous monitoring which is the ongoing security monitoring and testing, which are conducted to detect and respond to potential vulnerabilities promptly. We do secure communication where we employ encryption and secure data protocols to safeguard data both in transit and at rest. To ensure the integrity and confidentiality of our exchanges as well as practicing user awareness where Coveo continuously educates users on security risks and best practices to foster a security conscious culture within our organization. Finally, we're committed to doing continuous improvements, to do ongoing investments and research to build and protect our platform infrastructure to stay ahead of emerging threats and respect industry standards. By integrating security into every aspect of our solution, we empower organizations to embrace innovation with confidence while maintaining the highest standards of data protection and compliance. Now when it comes to ensuring the security and privacy of your company's data, there's several key differentiators and capabilities that need to be on your radar. These factors not only provide robust protection, but also enable compliance with reg various regulations and standards. Let's hand it over to our senior product manager Frank to discuss. Thank you, Patricia. So first, let me demonstrate how in fact we showcase these capabilities. So these capabilities have been recognized through many certifications that we've acquired. Some in, in the past few years, but some very recently, notably the newly acquired ISO twenty seven thousand and one certification. This certification in particular validates our strong commitment to upholding the confidentiality, integrity, and availability of our customer's data and staying compliant with applicable laws and regulations. We also, are very, inclined towards, ensuring we have regular regulatory compliance And since we are international, this applies to a lot of different, regulations across the world. So we are adhering to regulations like GDPR CCPA in California, and, everywhere ensuring direct to privacy and the ability to be forgotten, as they are super important. Cavell understands that these regulations, need to be followed and we provide features that enable compliance. We also have, of course, HIPAA compliance for companies operating in the health care industry. So we ensure that we have a platform that maintains strict data security and privacy measures to protect sensitive patient information. In addition to that, regarding specific document and data security for all of our customer's data. We one of the key features of Caveo is that we follow we index, source systems permissions. So let's say, for example, that we would be indexing, Surepoint, instance from your for your company, all the permissions to specific documents that exist in your organization for different levels or different hold to access certain documents or not are enforced at indexing time. That's called the early binding. So they are these permissions are extracted simultaneously with item data item data retrieval, ensuring comprehensive protection for every piece of information. So this approach not only enhances security, but it also optimizes search performance because it filters out inaccessible items before queries for an identified or even an anonymous users, unlike systems that use alternative permissions management. And last but not least, we also, do regular audits and vulnerability assessments we also conduct third party vulnerability assessments, leveraging programs like hackerone to proactively identify and address potential vulnerabilities So talking about security, we can't help, but talk about cloud data storage. This is a sensitive issue. This is what, I I would say makes a lot of companies or a lot of people, very sensitive about moving their data from on premise to the cloud. It's more and more accepted than it's been, in the past years, but it's still it's still a hurdle and and a big one for some to to overcome. But so there, Caveo obviously leverages the power of the cloud for data storage of its index, ensuring scalability and robust protection also in the sense that data can be replicated, but it stays, it stays very siloed in terms of, customer, per customer. So be although we are a multi tenant SaaS company, our indexes, where Kavio customer customer data is stored. We are in a customer data, are hosted in single tenant, virtual machines and containers, and they're provisioned conclusively for each customers. Now this approach guarantees that your data remains isolated and doesn't get mixed with that of other customers. Additionally, our cloud storage allows for replication as a production indices as I was saying, which provides redundant in ensuring availability even in the case of, you know, one Amazon region going down, for instance. Next slide, please. Another key feature we have, for security and for regulatory adherence is data residency. So it's a critical concern for many companies. And with Caveo, you have the flexibility to choose your preferred data residency location. Whether you prefer the US or Ireland, Australia, or Canada, we provide options to ensure that your data lives and stays in the desired region. And last but not least, we perform user tracking if necessary without cookies. So we take privacy very seriously, and that includes user tracking practices. Unlike traditional methods that rely on cookies or authentication, we have deep learning technology that's cutting edge and can detect user behavior and intent in real time, enabling personalized recommendation with only a few clicks into a session without compromising user privacy. That's super fascinating, Frank. Thank you so much for that. So as you can see, Kubeo is equipped to safeguard your data wherever it lives, ensure compliance, and provide a seamless user experience for everyone. Now, Let's take a quick peek at our generative answering product and dive into how we address some of the key challenges created by generative AI. As we explore the potential of this groundbreaking technology, it's crucial to consider security and privacy implications while effectively solving the associated challenges. COveo is the world's first relevance AI platform to offer trusted enterprise ready generative answering. Our Kubeo relevance generative answering solution combines factually accurate, contextually relevant question answering. Enterprise grade security, and the indexing of multiple content sources to bring you generative AI you can trust. Frank, can you tell us a bit more about the security challenges associated with generative AI? Certainly, Patricia. So the nine main challenges of generative AI that that Caveos identified and solves are listed here. And here, I'm gonna go into the top four that we need to consider when it comes to security So security of generative content, enterprise proprietary content, the currency of content, and sources of truth and verifiability. So we are addressing these through four different, through four different angles, so to speak. First one would be secure content retrieval. So we implement robust security measures to safeguard our generative content preventing unauthorized access tampering or misuse, our platform offers secure access to up more than a hundred cloud and on premise content source types. And those source types include structured as well as unstructured data. And again, as I was saying, with the early binding security, we have document level security in the index. The second angle is dynamic grounding So the timeliness and accuracy of of data and generated content are vital when providing generative AI powered responses So what Kaville does is it we ground the LLM prompt context with passages from secured personalized search results. To ensure that the output is relevant, it's up to date, accurate, and and is consistent, as well as, of course, tailored to the requester's permissions. The third angle would be zero retention. So we understand, of course, the value and sensitivity of enterprise proprietary content. So our approach ensure that customer data is never ingested nor used to train models. This strict separation and protection of proprietary content gives our customers peace of mind. So your data stays in the Kaveo index it's given as a context for a prompt to the LLM, which will then generate an answer based on that, but it's never being used unlike when you would be using chat JPT online, for instance, because we have enterprise agreements with LLM providers they they'd never keep that data. Last but not least auditable prompts and responses. So all prompts and responses generated by the model are tracked. Of course, not for purpose of training at LM models, but for auditing purposes. So then we can ensure that the models are being used to generate answers in a responsible and ethical manner. That's super exciting. And when you take a look at how our generative security, our generative AI security measures, if you take a look at them in their totality, they're really designed to help you mitigate the financial risks that can be caused by misinformation and hallucinations. So the global average cost of a data breach is a staggering four point five million dollars, and that's a huge price to pay along with all of the damage that could be caused to your company's reputation. Cobello's commitment to addressing these security risks, combined with our dedication to privacy and accuracy, really does set us a part as a trusted provider of generative AI solutions. We have all the right foundational security in place to help you innovate safely. Well, thank you all so much for joining us today for our webinar on enterprise data security and AI. We really enjoyed showing you how Covalo security practice and velocity, keep your data and users safe, all while embracing innovation. And as you can see, on top of Coveo's many great security capabilities, our customers get to enjoy higher conversion rates, hundreds of thousands of hours of work saved, as well as higher ESAT and CSAT scores. If you're interested in learning more about Coveo, please do feel free to book a one on one discovery call with our team to learn what we can do for your company. And why not sign up for our generative AI demo webinars? And they'll be taking place in August and September, and they're really cool. You'll really get to see our product in action doing all sorts of really exciting things. I'm really excited for you to see it.
Enterprise Security and AI - How To Innovate Safely
an On-Demand Webinars video

Patricia Petit Liang
Platform Marketing, Coveo
Next
Next
