# Security, Privacy & Human Review Controls | WinLead AI

Know where data came from, who can access it and when an email can be sent. Put sources, permissions and review records into the everyday customer workflow.

Traceable, reviewable, manageable

## Put control into the everyday workflow.

## Tenant and role access

Use tenant context and role permissions to control business access. Administrators manage membership and service configuration; verify the actual permission scope in your deployment.

## Sensitive configuration

Store service credentials through protected configuration paths and return masked values. Limit access and record configuration changes.

## Human review before sending

Review content, recipients and sending scope. A generated draft or high fit score does not authorize outreach.

## Records for accountability

Keep key operations, review decisions and execution outcomes traceable so the team can investigate what happened.

## Personal-data handling

Use administrator tools for export, deletion or anonymization requests. Define identity checks, processing scope and retention with the actual operator.

## Sources and sending rules

Check provenance, sender identity, suppression and channel requirements before operational use. Data availability is not permission for every purpose.

A clear boundary

## Controls support responsible operation.

This page describes product controls, not independent certification or a legal conclusion about a particular use. Confirm deployment settings, provider agreements and operating procedures before launch.



## Is this a claim of GDPR certification?

No. This page describes product controls, not independent certification or a determination that a particular business use is compliant.

## How are personal-data requests handled?

Administrator tools support export, deletion and anonymization requests. The actual operator must define identity verification, processing scope and retention rules.

## Where is data stored?

The system uses Web, API, Worker, PostgreSQL and Redis services. Data location, backups and access controls depend on the deployment; confirm them with its administrator.

Source: https://aihk.nailcloud.cn/en/security/