zeroheight

Description Permissions Security & Compliance

zeroheight is the design system management system that keeps your entire product team on the same page. Document design decisions, reusable components and code, and bring together information from all of the apps your team is using. Now with AI that answers questions about your design system instantly.:robot_face: Ask AI about components, patterns, and guidelines
:rocket: Invite your team to check out what's new with a link to the new release
:eyes: Boost visibility of your design system and encourage discussionAI disclaimer
This bot uses AI to answer questions about your design system. Responses may contain inaccuracies - always verify important details with your design system team. Your design system documentation will be processed by OpenAI's language models to provide answers. By installing, you consent to this data processing and confirm you have authority to share your team's design system information.
With the zeroheight app, you can keep your team updated on changes to your design system.

Permissions

zeroheight will be able to view:

zeroheight will be able to do:

Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.

General

Privacy & data governance

Data retention policy

"15.3 On termination of this Agreement for any reason: (a) all licences granted to the Customer under this Agreement shall immediately terminate and the Customer shall immediately cease all use of the Services; (b) zeroheight may destroy or otherwise dispose of any of the Customer Data in its possession following termination, unless zeroheight receives, no later than ten days after the termination of this Agreement, a written request for the delivery to the Customer of the then most recent back-up of the Customer Data. zeroheight shall use reasonable commercial endeavours to deliver the back-up to the Customer within 30 days of its receipt of such a written request, provided that the Customer has, at that time, paid all fees and charges outstanding at and resulting from termination (whether or not due at the date of termination). The Customer shall pay all reasonable expenses incurred by zeroheight in returning or disposing of Customer Data; and (c) any rights, remedies, obligations or liabilities of the parties that have accrued up to the date of termination, including the right to claim damages in respect of any breach of the agreement which existed at or before the date of termination shall not be affected or prejudiced. For details, see Data Management Policy at https://zeroheight.com/14bb9b256/p/137c39-security-documents

Data archiving and removal policy

Data is deleted using AWS data deletion tools For details, see Data Management Policy at https://zeroheight.com/14bb9b256/p/137c39-security-documents

Data storage policy

Data is stored in line with a customer's requirements For details, see Data Management Policy at https://zeroheight.com/14bb9b256/p/137c39-security-documents

Data center location(s)

Ireland

Data hosting details

All data is hosted and backed up in AWS EU-West-1 Dublin Ireland, across nine data centers.

Data hosting company

AWS

App/service has sub-processors

yes

Guidelines for sub-processors

https://terms.zeroheight.com/18bfef5dc/p/58a76f-sub-processors

App/service uses large language models (LLM)

yes

LLM model(s) used

OpenAI GPT-5

LLM retention settings

Standard retention: 30 days for abuse monitoring, then auto-deleted. Zero Data Retention (ZDR) enabled where available: inputs/outputs never logged or stored. Non-ZDR endpoints follow 30-day retention before deletion unless legally required to retain.

LLM data tenancy policy

OpenAI does not use API data to train models. Customer data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Access restricted to authorized personnel for support, abuse monitoring, and legal compliance. SOC 2 Type 2 compliant with DPA for GDPR.

LLM data residency policy

API configured for European data residency. All requests processed exclusively in Europe (EEA/Switzerland) with zero data retention. Data handled in-region via eu.api.openai.com and never leaves European borders.

Certifications & compliance

Security