Ollie Adds SOC 2 Credential for Family AI, With Messages Retained Up to 24 Months

Ollie is asking families to give an AI assistant access to the details that run a household—and it now has a compliance credential to support that trust pitch. The San Diego startup has achieved SOC 2 Type I compliance through an independent audit of its data-protection and operational controls.

Household help depends on access

Ollie connects to calendars and email to organize family schedules and provide daily updates. Through group chats, it supports meal planning, grocery shopping, to-do tracking, appointment booking and bill payments—tasks that require the assistant to handle a broad view of a household’s plans and requests.

For websites that require a login or payment, Ollie does not request usernames or passwords. Instead, it opens a cloud-browser session and sends the user a link to that remote session, where the user completes the sign-in or payment. The approach keeps credentials out of Ollie’s hands, but it also leaves users with a required step for certain actions.

The privacy claim has defined limits

Ollie says it does not share user data and uses subscriptions rather than data monetization. Its policy also says it may use de-identified or aggregated message data to evaluate, debug and improve its systems. Those provisions describe how the company says it can operate and improve the assistant while maintaining its stated privacy position.

Retention and deletion

• Message content may be retained for up to 24 months unless a user requests earlier deletion.
• Users can request deletion of their text-message information under the policy.

A small startup faces a trust test

Ollie has raised a reported $7.5 million seed round, largely from Khosla Ventures and AI House. Chief Executive Bill Lennon has not disclosed the company’s user or paid-customer count. He said Ollie’s paid-subscriber retention curves were consistent with leading AI subscriptions, without providing the underlying retention figures.

The certification gives Ollie an independently audited control framework to pair with its privacy claims. The remaining product question is whether its disclosed message-processing rules, retention period and extra login step will persuade families to grant the access needed for the assistant’s most useful tasks.