AI providers & data processing
The PICHI platform is flexibly configured to meet each client's security requirements. The set of language models used is defined by the project configuration. At the client's request we can limit processing exclusively to Russian models (Yandex, Aspirity's own model) or deploy the platform in an isolated on-premise environment — with no transfer of data outside the client's infrastructure. The chosen configuration is fixed by a separate addendum to the contract.
Last updated: 01.07.2026
How we handle data
- Only the text content of the dialogue from a training session — what is needed to produce a response — is sent to language models.
- Account personal data (email, name) is not included in requests to the LLM — this is enforced by technical measures.
- Voice recordings are stored in infrastructure located in Russia and are not passed to language models.
- Speech recognition (STT) runs in Russia by default (on-prem or Yandex SpeechKit); foreign STT (Deepgram, USA) may be used at the client's choice in the standard cloud configuration.
- Dialogue analytics is performed on de-identified data.
Processing configurations
| Configuration | What it is | For whom |
|---|---|---|
| Standard (mixed) | Optimal quality: both Russian and foreign models may be used (see the table below). | Clients with no restrictions on foreign services. |
| RU-only | Processing exclusively by Russian services: YandexGPT, GigaChat (Sber), Aspirity's own model; STT — on-prem or Yandex SpeechKit (Deepgram disabled). Foreign services are turned off. | Clients with a policy prohibiting cross-border transfer. |
| On-premise | Fully isolated environment within the client's infrastructure. No external data transfer. | Banks, pharma, public sector, maximum security requirements. |
The chosen configuration may be fixed by a separate addendum to the contract.
AI providers (language models)
| Provider | Jurisdiction | What is transferred | Role / note | Policy link |
|---|---|---|---|---|
| Aspirity LLC (own model) | Russia | Dialogue text | Available in RU-only and on-prem | Privacy Policy |
| Yandex LLC (YandexGPT) | Russia | Dialogue text | Available in RU-only | yandex.ru/legal/confidential |
| Sber (GigaChat) | Russia | Dialogue text | Available in RU-only | |
| OpenAI | USA | Dialogue text without identifiers | Disabled in RU-only / on-prem | openai.com/policies/privacy-policy |
| Anthropic | USA | Dialogue text without identifiers | Disabled in RU-only / on-prem | anthropic.com/legal/privacy |
| Google (Gemini) | USA | Dialogue text without identifiers | Disabled in RU-only / on-prem | policies.google.com/privacy |
| Alibaba (Qwen) | China | Dialogue text without identifiers | Disabled in RU-only / on-prem | |
| DeepSeek | China | Dialogue text without identifiers | Disabled in RU-only / on-prem |
The set of providers depends on the project configuration and may be limited by contract. The table reflects the full list of technically supported providers.
Speech recognition & synthesis (STT / TTS)
| STT provider | Jurisdiction | Note |
|---|---|---|
| On-premise | Within the client's environment | Voice does not leave the client's infrastructure. For maximum security requirements. |
| Yandex SpeechKit | Russia | Russian STT, the default option for the Russia-based cloud configuration. |
| Deepgram | USA | Voice transfer. Used at the client's choice. |
Other subprocessors
| Subprocessor | Purpose | What is transferred | Jurisdiction | Policy link |
|---|---|---|---|---|
| Selectel | Platform hosting, data storage | All platform data | Russia | selectel.ru/about/documents |
| Yandex (email delivery) | Transactional emails (training notifications) | email, recipient name | Russia | yandex.ru/legal/confidential |
| Yandex SmartCaptcha | Form protection against bots | IP, behavioural data | Russia | yandex.ru/legal/confidential |
| PostHog | Product analytics (with consent) | De-identified events | EU / USA | posthog.com/privacy |
| Yandex Metrica | Web analytics (with consent) | De-identified events | Russia | yandex.ru/legal/confidential |
Cross-border transfer
In the standard configuration, the infrastructure of foreign language-model providers may be used to generate AI responses. In that case only the de-identified text content of the dialogue is transferred — content that contains no user identifiers and does not constitute personal data. Users' personal data (email, name) and voice recordings are not transferred outside Russia. For clients whose internal policies do not allow the use of foreign services, the RU-only and on-premise configurations are available.
Contacts and fixing the configuration
For security and data-processing enquiries: hi@aspirity.com
On request we are ready to provide a DPA / addendum to the contract, fix the chosen processing configuration and complete the client's security questionnaire.
Change log
- 01.07.2026 — page published, version 1.0.
Last updated: 01.07.2026