Minh AI BY GEOVIL

Your API keys stay yours.

With the Lite plan, or whenever you prefer, Minh AI uses your own OpenAI, Anthropic, Google Gemini, Mistral or other AI key. Here is exactly how that key is protected, and how you can check it yourself.

Excel · Minh AI→Your AI provider GEOVIL servers

Six protections

1Never sent to GEOVIL

AI requests go straight from Excel to your provider. Our servers never receive, store or log your key.

2Encrypted on your computer

Stored with AES-GCM 256. The encryption key is held by the browser as a non-extractable key: it can be used, never read. What is saved is only ciphertext.

3Other destinations blocked

A Content-Security-Policy tells the browser which addresses Minh AI may contact. Anything else is refused by the browser itself, even if a bug tried.

4No third-party code

Map engines, icons and fonts are served by Minh AI itself, not by public CDNs. The only outside script is Microsoft's Office.js, required by Excel.

5Public maps isolated

Published maps run on a separate address that cannot access the storage where keys are kept.

6Never in your workbook

Keys are not saved in the Excel file, so you can share workbooks safely. Choose "don't remember" and the key is forgotten the next time Minh AI opens.

Check it yourself

Open Minh AI in Excel on the web, then your browser's developer tools (F12) and the Network tab.
Run an AI feature (Ask your map or AI Insights).
The only request carrying your key goes to your provider (for example generativelanguage.googleapis.com). Requests to minh-api.tienai-app.workers.dev never contain it.
View the page source: the Content-Security-Policy line lists every address the browser is allowed to contact.

Addresses Minh AI may contact

Your AI provider (only the one you choose): api.openai.com api.anthropic.com generativelanguage.googleapis.com api.mistral.ai api.deepseek.com api.groq.com openrouter.ai *.openai.azure.com

Maps and geocoding: tiles.openfreemap.org api.maptiler.com api.mapbox.com tile.googleapis.com data.geopf.fr

Minh AI: minh-api.tienai-app.workers.dev (account, plan, usage, geocoding; never your AI key) and ffvhthirpmdmwuhiozet.supabase.co (sign-in)

Microsoft Office: appsforoffice.microsoft.com and Office domains, required by Excel.

Good practice

Create a key used only by Minh AI, so you can revoke it without affecting anything else.
Set a monthly spending limit on that key or project in your provider's console.
Revoke and replace the key if you think it was exposed. In Minh AI: Connections › AI › Remove my key.

What no application can protect against

If your computer itself is compromised (malware, or someone using your Windows session), an attacker can act as you in any application, including Excel. Keep your system updated, and use a key with a spending limit so any loss stays capped.

What GEOVIL does process

Your account (email, name) and your plan, for sign-in and billing (payments by Stripe; we never see your card).
Monthly usage counters, to apply your plan's allowances.
Addresses you choose to locate, sent to the geocoder (official address databases such as the US Census, OpenStreetMap elsewhere); results are cached to make the next map instant.
On the Pro plan without your own key: the comments you analyze, sent to Anthropic's API (Claude). With your own key, they go only to your provider.

Report a security issue

Write to contact@geovil.io.