Backstory (formerly People.ai): security & AI-training scorecard
backstory.ai ↗ · Revenue intelligence · Last checked Oct 17, 2026
Does Backstory (formerly People.ai) train AI on customer data?
No“Customer data is never used to train AI models. Data used only to deliver contracted services, no exceptions.”
SOC 2
Independent audit of security controls. Type II covers operating effectiveness over a period.
Type II
“Covered under SOC 2 Type II scope, independently audited.”
ISO/IEC 27001
Certified information security management system.
Not verified from vendor-owned sources
Note: Terms mention 'ISO 27001-related audits'; no certification claim found.
No vendor source found as of check date.
HIPAA / BAA
Whether the vendor will sign a Business Associate Agreement for PHI.
Not verified from vendor-owned sources
Note: No HIPAA/BAA statement found in fetched sources.
No vendor source found as of check date.
GDPR DPA
Data Processing Agreement/Addendum for personal data.
Standard DPA (includes AI processing commitments)
“AI processing commitments included in the standard Backstory DPA.”
Trains AI on customer data
Whether the vendor says it uses customer data to train AI models.
No
“Customer data is never used to train AI models. Data used only to deliver contracted services, no exceptions.”
Data retention
What the vendor publishes about how long customer data is kept.
Per customer contract
“Please refer to your individual contracts for specifics on our data retention and deletion policy.”
Subprocessor list
Where the vendor lists third parties that process customer data.
Not verified from vendor-owned sources
Note: Trust page references a subprocessor registry; URL not located.
No vendor source found as of check date.
Trust center
The vendor's security/trust portal.
Other notes
Additional context from vendor sources.
people.ai now redirects to backstory.ai; this listing replaces People.ai.
All sources checked (4)
Fetched on Oct 17, 2026. Vendor pages can change after this date.
Is this wrong? / Claim this listing
Vendors and readers can send evidence links. Nothing is published without a source.
Informational only, not legal advice or an audit. Summaries reflect Backstory (formerly People.ai)'s published pages as of Oct 17, 2026; verify with the vendor. Methodology & disclaimer.