01 · Agree
Define the scope
Agree brands, audiences, markets, competitors and synthetic research questions. No internal system credentials are needed.
For procurement, information security and legal teams
Brand and reputation studies run outside your IT infrastructure.
AIVO measures how external AI assistants describe and recommend your business. Standard onboarding, research, scoring and results delivery need no connection to your internal systems, no software installation and no internal credentials.
No installationFor standard brand and reputation measurement
No internal accessNo network connection or customer data feed required
AIVO Assist is a separate website deployment. Its installation, data flows and any optional integrations are reviewed for the agreed scope.
01 Brand and reputation measurement
From onboarding to results, externally hosted.
02 · Measure
AIVO runs the research
Test conversations, scoring and analysis run in AIVO-hosted services and external AI provider services.
03 · Review
Receive the findings
Review reports and, where included, the AIVO-hosted dashboard through a standard HTTPS browser connection. No client-side deployment is required.
04 · Act
You approve changes
Your team or agency implements agreed remediation through its own processes. Measurement does not grant AIVO deployment rights.
This applies to standard AI Win-Rate and AI RQ studies, Decision Risk Reviews, Sprint measurement and re-measurement delivered through AIVO Meridian. Approvals and publication of remediation remain with your team.
Optional connections, such as analytics event delivery, are excluded from this standard scope and remain off unless separately requested and agreed.
02 The deployment distinction
Review the service you are buying.
| Requirement | Brand and reputation studies | AIVO Assist |
|---|---|---|
| Installation | No software, agent, script or tracking tag installed on your devices, websites or networks for measurement. | A customer-facing product expert is deployed on your website. Installation is agreed separately. |
| System access | No internal credentials, data feeds or automated connection to client systems required. | Website changes and any integrations require the permissions and approvals specified in the deployment scope. |
| Information used | Agreed research inputs, public web content and answers to synthetic test questions. Optional evidence documents only when shared for the work. | Approved product information and visitors’ or agents’ product-fit questions. Personal details are not needed for the product-fit interaction. |
| Results and operation | Reports and an externally hosted dashboard where included. Standard browser access for authorized users. | Live answers on the website, with answer references and outcome connections where configured. |
| Procurement review | Hosted research service, engagement data handling and any dashboard access. | Website deployment, question handling, approved content, subprocessors and any analytics or other connections. |
Assist’s website presence does not imply unrestricted access to the rest of your infrastructure. Actual access, responsibilities and connections must be specified before deployment.
03 Data and delivery
Limited inputs. Auditable outputs.
Research and engagement data
Brand names, categories, competitors, synthetic questions, public content, AI answers and analysis. These test conversations are created for research, rather than taken from private customer chats.
Optional evidence documents can be shared for remediation. Their handling and suitability for any external AI processing must be agreed before submission.
Business user accounts
Dashboard access involves account data such as a business email, assigned role and authentication records. Session and audit logs include information such as login time, IP address and browser type.
No consumer datasets, payment-card records, health data or access to internal systems are required for the standard studies.
External measurement still involves data processing by AIVO and its providers. Confidential engagement data and account information are covered by the agreed terms, access controls and retention arrangements.
04 Security and procurement information
Get the facts needed for your review.
Hosting and access
The Meridian application, database and database backups are hosted in the United States. Static front-ends use a global delivery network. Browser and AI-provider connections use HTTPS/TLS. The database and backups are encrypted at rest.
Role-based access and multi-factor authentication are available. Client access is logically segregated. SSO is not currently supported.
Processing and retention
AIVO does not train or fine-tune models. AI calls use commercial provider APIs from AIVO-hosted services. Provider processing, retention and transfer arrangements are part of the engagement review.
Retention can be agreed contractually. Production deletion and backup expiry are separate steps, documented in the procurement information. DPA and applicable transfer arrangements are addressed during contracting.
How does AIVO’s security assurance apply to my engagement?
Standard brand and reputation studies run on AIVO-hosted services without access to your internal systems or a customer data feed. Where a study includes a Meridian dashboard, authorized users access it through a browser. AIVO Assist runs on your website, so its installation, data flows and any integrations are reviewed separately. AIVO does not hold ISO 27001 certification or have a SOC 2 report, and an independent penetration test of the Meridian application has not yet been completed. Infrastructure provider certifications apply to the providers’ own services. We can share the security documentation available for your engagement and discuss your assurance requirements during procurement.
What information can we request?
Request a scoped security and procurement brief covering architecture and data flows, subprocessors, access controls, retention, deletion and transfer arrangements. We can respond to your supplier questionnaire and discuss the applicable agreement and DPA. Where documentation or assurance work is still in preparation, we state that explicitly.
Service overview updated November 11, 2026. The agreed contract and deployment scope determine your engagement’s requirements. This page does not replace your organization’s vendor review.
Read the privacy noticeStart with the service scope.
Tell us whether you are reviewing brand measurement, an AI RQ reputation study or an Assist website deployment. We will provide the relevant procurement information and identify any optional connections separately.
Request procurement informationEmail Tim