How Wrooms manages higher-risk features

AI governance

NIST-aligned risk management

• Govern

  Wrooms maintains ownership, access, provider, and safety controls around AI desks and supporting services.

• Map

  64 live desks plus external model and infrastructure providers are mapped to product responsibilities and higher-impact use cases.

• Measure

  Wrooms uses testing, privacy filtering, monitoring, incident signals, and product evaluation to assess model and product behavior.

• Manage

  Human review remains necessary for high-impact hiring, credit, medical, legal, and similar decisions. Safety controls can restrict or stop an AI action.

govern · map · measure · manage

Privacy & identity

Data minimization, rights, and account lifecycle

Wrooms separates authentication, application sessions, user content, personalization, and transaction data. Account deletion and OAuth deauthorization are separate operations so disconnecting one sign-in provider does not unintentionally destroy a multi-provider Wrooms account.

Wrooms does not currently sell personal information or share it for cross-context behavioral advertising. Where applicable law provides access, correction, deletion, portability, appeal, or opt-out rights, Wrooms handles those requests subject to identity verification and lawful exceptions. See the Privacy Policy and Data Deletion page.

Digital assets & financial crime

Controls depend on the activity and jurisdiction

Digital-asset notice. Any wallet, token, stablecoin, digital collectible or NFT, staking, exchange, transfer, marketplace, on-ramp, off-ramp, or blockchain feature made available through Wrooms is subject to its actual functionality, provider, network, transaction, jurisdiction, and applicable law. Product descriptions do not determine whether Wrooms or a third party is acting as a broker, exchange, custodian, money transmitter, securities intermediary, commodities intermediary, financial institution, fiduciary, payment service, or other regulated person. Wrooms may require identity or sanctions screening, restrict jurisdictions or counterparties, pause or reject activity, require additional information, comply with lawful process, or disable a feature where reasonably necessary for law, safety, fraud prevention, or platform integrity. Nothing on Wrooms is investment, legal, accounting, tax, or fiduciary advice.

Depending on the feature and applicable requirements, Wrooms or a provider can apply age gates, identity verification, sanctions screening, transaction monitoring, geographic restrictions, velocity or value limits, fraud controls, source-of-funds review, transfer restrictions, or manual review. See the Digital Asset Risk Disclosure.

Public networks

Public records, private secrets

When a user chooses a feature that interacts with a public blockchain or other public network, transaction records can expose addresses, counterparties, amounts, assets, smart-contract interactions, hashes, and timing. Wrooms does not intentionally place passwords, seed phrases, private keys, full payment-card numbers, Social Security numbers, or private room contents on a public blockchain. Independent public records can persist after account deletion.

Vendors

Third-party inventory

Wrooms relies on service providers for parts of the stack. Provider availability, terms, data handling, regulatory roles, and technical controls can differ from Wrooms’ own. This inventory describes important dependencies, not a representation that every vendor is used for every request.

• xAI

  Live generation. SOC-style vendor review lives with account-admin.

• Wikipedia

  Salvage facts. Public encyclopedia.

• DuckDuckGo

  Instant answers. No user identity sent.

• Google

  CSE when a key is set. Else Google News RSS.

• Bing

  Bing Web Search when a key is set. Else Bing News RSS.

• Wikidata

  Entity facts for Discover.