Transparency about what leaves your device, where it goes, what comes back, and what is kept. If your organisation cannot accept AI data flows, this page also shows which applications consume no AI or SMS at all — and how to switch AI off entirely.
When you use an AI-powered feature, here is exactly what happens to your document — what leaves the device, where it goes, what comes back, and what is retained.
SMS delivery. Where a metered application sends an SMS, the recipient's phone number and the message are transmitted to our messaging sub-processor, SMTP2GO, which delivers the message. SMTP2GO is also used for email delivery. Recipient contact details are disclosed to SMTP2GO only to deliver the message or email.
Only four applications consume metered usage — AI processing, SMS delivery, or both. The other eleven consume neither AI nor SMS: they transmit no content to any AI provider and send no messages, making them suitable for customers who cannot accept AI data flows. This is the same list referred to in clause 9A.2.1 of the Terms of Service.
SMS delivery, where used by a metered application, sends recipient phone numbers to our messaging sub-processor, SMTP2GO (see section 1). Message content and recipient numbers are transmitted only to deliver the message.
| Document content (by Cyber AI Connect) | Not retained. Documents are processed and the result returned; content is not stored after processing. |
| Usage metering (by Cyber AI Connect) | The cost of usage only — never document content. |
| Document content (by xAI) | Handled under xAI's terms and privacy practices for the purpose of performing the requested processing. |
| Recipient contact details (by SMTP2GO) | Phone numbers and email addresses are disclosed to SMTP2GO only to deliver the message or email, under its terms and privacy practices. |
| On the device | Nothing from AI processing is stored on the Apeos device. |
The included amount ($5.00 per device per calendar month, inclusive of GST) applies to Licences covering applications that consume metered usage, calculated at our published rates in force at the time of use. Applications that use neither AI nor SMS carry no usage and no included amount. When the monthly amount is used up, the device panel will show “Monthly usage used up. Top up to continue.” and you can purchase additional usage as prepaid credit at any time.
Our rates are public and versioned. View the current rate card → Rate changes follow published supply costs, take effect on at least 30 days' notice, apply only to usage after the effective date, and never reprice prepaid credit you have already purchased.
This makes Cyber AI Connect deployable in environments — government, legal, health, financial — that cannot permit AI data flows, while keeping the full set of non-AI print, scan, fax and cloud-storage features available.
This is often the strongest answer for government and enterprise buyers: your AI processing is governed by your own contract and data-handling arrangements with the provider, not ours. Cyber AI Connect is not a party to that agreement and does not pay those charges. Where you supply your own credentials, no included allowance applies to AI processing, and a processing fee applies (3.5% for customer-supplied credentials, 2.5% for partner-supplied) — see clause 9E of the Terms of Service. You control the credentials, can revoke them at any time, and we continue to record usage and apply misuse protections. SMS delivery continues to use our messaging sub-processor.
Cyber AI Connect's own servers are located in Australia or with cloud infrastructure providers. When you use an AI-powered feature, document content is disclosed to xAI, which processes data on servers outside Australia, including in the United States. SMS and email delivery use SMTP2GO. These cross-border disclosures are described in our Privacy Policy (clause 7, APP 8).
All data moving between the Software, Devices, our servers, and the AI provider travels over HTTPS/TLS.
Stored configuration and account data are protected with access controls and restricted folder permissions.
Stored SMB and Microsoft 365 credentials are held for the account and accessible only to you and any support partner you authorise.
Access to personal information is limited to personnel and authorised partners who need it. Device access can be quarantined on suspected compromise.