// Trust & Security Report
Copysmith AI, Inc. (Frase product)
Content operating system for AI search. Single integrated platform handling research, writing, optimization, publishing, and monitoring across Google and AI platforms (ChatGPT, Perplexity, Claude, Gemini, Google AI). Includes Frase Answers, AI Agent, SEO/GEO optimization, Content Guard, and FraseCMS publishing.
Certifications held
2
Maturity
Growth
Trains on your data
No
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on frase.io“Independent auditors have verified Frase's controls for security, availability, and confidentiality over a sustained audit period.”
Verify on frase.io“The platform meets EU data protection regulations. For European users, Frase recognizes GDPR rights including access, rectification, erasure, and data portability.”
> Show 4 unconfirmed / not-held certifications
source: frase.ioNo public evidence of HIPAA certification. Product is not positioned as healthcare-compliant.
source: frase.ioNo public evidence. Frase does not handle payment card data directly; payment processing delegated to payment providers.
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Not offered
Data region
Not specified. Company headquarters in Birmingham, AL USA. No data residency options mentioned in public documentation.
Frase explicitly does NOT use Customer Data to develop or train generalized AI/ML models. Terms state: 'Frase does not use Customer Data obtained through Google Workspace APIs or any other platform to develop, improve, or train generalized AI and/or machine learning (ML) models.' Data accessed through integrations is used solely for service delivery. Frase may use aggregated, anonymized, or de-identified data for analytical purposes and industry benchmarks (minimum 10 customers required per benchmark; opt-out available via support@frase.io).
// Security controls
// Products & data scope
data: Processes customer content, visitor questions, SERP data, competitor data, AI platform citations, brand voice samples. Does not train on customer data. Uses aggregated anonymized data for benchmarking.
Single integrated platform for content teams and agencies. Handles research, AI-assisted writing, optimization, publishing (WordPress, Webflow, Sanity, Wix, FraseCMS), monitoring (Google rankings + AI platform citations), and auto-fix workflows. Free trial: 7 days, no credit card. Paid plans: Starter $39/mo, Professional $103/mo, Scale $239/mo (annual billing with 20% discount). Enterprise available by quote. Autonomous publishing available after earned trust per content type.
// What to watch
- Only holds SOC 2 Type II and GDPR - no ISO 27001, HIPAA, FedRAMP, or other enterprise certifications publicly documented. Appropriate for the growth-stage market segment (content teams, agencies), but limited for regulated industries (healthcare, finance).
- No Data Processing Agreement (DPA) mentioned. GDPR rights offered but DPA availability not documented on public pages.
- Data residency not configurable - no mention of EU data centers or regional data storage options in public documentation.
- Security language uses 'reasonable, commercially acceptable security procedures' which is standard boilerplate; specific controls details limited to high-level encryption + RBAC.
// At a glance
Pricing model
Freemium (7-day trial), tiered SaaS: Starter $39/mo | Professional $103/mo | Scale $239/mo (annual). Additional seats $29/mo. Enterprise by quote. 20% discount for annual billing.
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Copysmith AI, Inc. (Frase product)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
frase.io