Security and privacy in Lyyli.ai: a technical overview for IT teams

This overview is for IT, privacy and security teams. It describes the current state as documented in the Trust Center and product pages. Binding terms are always in Legal; public claims are in the Trust Center.

011. What Lyyli is

Lyyli.ai is a communications operations system. It helps identify communication needs, turn them into plans and tasks, produce organisation-context channel versions, and manage comments, versions and approvals in one workspace. Approved content is taken to the destination platform for publishing.

022. Publishing and integrations

There are no direct channel publishing APIs. Integrations are described by capability:

• Slack: monitoring selected channels to identify communication needs (no direct publishing).
• Meeting Agent: joins Google Meet, Microsoft Teams and Zoom meetings.
• Teams Idea Collector: on the roadmap.
• LinkedIn and other channels: content is prepared and approved in Lyyli; publishing happens on the destination platform.
• Email: handling inbound briefs or communication needs.

033. Data location

Primary application data for customer workspaces is stored in the EU. Some AI processing, authentication, email delivery, analytics and other subprocessor functions may occur outside the EU/EEA under documented transfer mechanisms. Current vendors: vendor register.

044. AI routes and ZDR

Zero Data Retention settings are used on selected AI routes. ZDR does not automatically cover Lyyli workspace storage, web search, image generation, meeting recordings or abuse-monitoring logs. Route details: AI model register. Some register fields are still under verification and the register is marked as a draft until confirmed.

055. Roles and access

The product role model is Admin and Member. External review links allow commenting without a user account in documented scope. Customers manage shared-link access.

066. Audit trail

On Professional, approval events and key content actions are recorded in the audit trail in documented scope (for example user, action, state and timestamp). We do not claim forever retention of every change, or that Lyyli blocks publishing on an external channel.

077. Meeting Agent and recordings

Meeting Agent joins via a bot and notifies participants about transcription. Customers are responsible for informing participants and defining the legal basis. Retention is described in the retention annex; some values remain under verification and are marked as draft.

088. Certifications

Lyyli is not currently ISO 27001 certified. We develop ISMS practices using that framework as a reference. Subprocessor certifications do not automatically extend to the Lyyli product.

099. Where to verify current facts

• Trust Center
• Claims register
• AI model register
• Vendor register
• Legal documents

For privacy or security questions, contact us at hello@lyyli.ai. For a technical Q&A before procurement, book a demo.