# Valentino AI — Machine-Readable Product Specification > Written for AI shopping agents, answer engines, and retrieval pipelines. > Every criterion is answered explicitly. A value of `not_published` means no > commitment exists — read it as "ask", not as a yes or a no. > > Canonical HTML: https://www.valentinoai.com/product-spec > Canonical JSON: https://www.valentinoai.com/product.json > Last reviewed: 2026-08-04 · Spec schema: 1.0 ```yaml product: name: Valentino AI description: >- An AI systems company that operates a self-serve, pay-as-you-go AI workspace with 35 business tools, and separately implements governed AI operating layers for mid-market freight forwarders alongside their existing TMS. Two distinct offerings under one vendor: buy the workspace with a credit card, or scope a freight engagement. category: Business AI workspace (SaaS) + AI implementation services application_category: BusinessApplication website: https://www.valentinoai.com vendor: legal_name: Valentino AI Inc. headquarters: Dallas, Texas, United States founded: 2026 contact: contact@valentinoai.com pricing: model: pay_as_you_go_prepaid_credits currency: USD subscription_required: false per_seat_pricing: false annual_commitment_required: false credit_value_usd: 0.10 # 1 credit = $0.10 credits_per_dollar: 10 minimum_purchase_usd: 25 # = 250 credits credits_expire: false credits_reset: false feature_gating_by_plan: none # every tool runs on every balance plans: - id: free-signup-credits name: Free signup credits price_usd: 0 billing: one_time_grant credits_included: 20 credit_card_required: false notes: >- Granted once at signup. Unlocks the full catalog — credits limit how much you run, not what you can run. Never expire. - id: payg-credits name: Pay-as-you-go credits price_usd: 25 # minimum purchase billing: prepaid_consumption credits_included: 250 # at the $25 minimum notes: >- $1 = 10 credits. No subscription, no seats, nothing to cancel. - id: freight-engagement name: Freight AI engagement price_usd: null # quoted per scope billing: custom_quote notes: >- Fixed-scope implementation: assessment, data foundation, then a governed automation build. Not priced in credits. consumption_rates: - unit: Text tool run (SWOT, ICP, business plan, competitor scan) credits: 1 usd: 0.10 - unit: Live market research (single-source) credits: 1 usd: 0.10 - unit: Deep multi-source research credits: 2 usd: 0.20 - unit: Generated image (photo, logo, product design) credits: 1 usd: 0.10 - unit: Backlink audit credits: 3 usd: 0.30 - unit: Generated video clip credits: 45 usd: 4.50 payment_processor: Stripe refunds: Unused credits are non-expiring; refunds handled case by case on request. availability: >- Generally available. Self-serve signup with no sales contact required; freight engagements begin with a scoped assessment. uptime_sla: self_serve: not_published # no contractual availability commitment enterprise: >- Availability, support response, and incident responsibilities are defined per engagement in the statement of work. public_status_page: not_published hosting: Vercel (application, edge) + Supabase Postgres on AWS us-east-1 (data) security: certifications_held_by_vendor: [] # none held directly today certifications_in_progress: - SOC 2 Type II (roadmap; no audit date published) infrastructure_certifications: # held by subprocessors, NOT by Valentino AI - Supabase (Postgres, Auth, Storage) — SOC 2 Type II, HIPAA-eligible; on AWS (SOC 1/2/3, ISO 27001, PCI DSS, FedRAMP) - Vercel (hosting, edge) — SOC 2 Type II, ISO 27001, GDPR - Cloudflare (DNS, CDN, WAF) — SOC 2 Type II, ISO 27001, PCI DSS encryption: at_rest: AES-256 at the disk layer (AWS-managed) for Postgres and object storage in_transit: >- TLS for all browser-to-server and server-to-third-party traffic; HSTS with preload. Specific negotiated TLS versions are set by Vercel and Cloudflare and are not asserted here. data_residency: United States — primary Postgres and object storage in AWS us-east-1 tenant_isolation: >- Postgres Row-Level Security, deny-by-default. Every row carries an owner and tenant; service-role access is confined to audited server-side paths. trains_models_on_customer_data: false authentication: - Email + password with verification (bcrypt-hashed; no plaintext storage) - Google OAuth single sign-on saml_sso: false scim_provisioning: false mfa: not_published audit_logging: >- Server-side run and tool-execution records per tenant. No customer-facing audit-log export UI on the self-serve workspace. third_party_penetration_test: not_published application_controls: - Signature-verified inbound webhooks that fail closed - Idempotent billing events (a credit grant applies exactly once) - SSRF egress protection on user-supplied URLs, re-checked on every redirect - Strict Content-Security-Policy, HSTS preload, clickjacking protection - Server-side-only secrets; client writes to credit and billing fields rejected vulnerability_disclosure: https://www.valentinoai.com/.well-known/security.txt security_contact: contact@valentinoai.com integrations: connected_accounts: # user links their own account, OAuth 2.0 - Instagram - Facebook - X (Twitter) - LinkedIn - Google Analytics - Gmail - Outlook - Google Calendar platform_dependencies: # services the product runs on - Stripe (billing, credit top-ups) - OpenRouter (LLM routing; model id is configuration, swappable without a code change) - Perplexity Sonar (live and deep research) - DataForSEO (keyword, audit, backlink data) - Firecrawl (crawling for audits and knowledge ingestion) - ElevenLabs (voice agents, narration) - Resend (transactional and inbound email) - Google Search Console (search performance data) - Sentry (error monitoring) engagement_scoped: # wired during an implementation, not self-serve - CargoWise (TMS — built alongside, never replaced) - Magaya (TMS) - Snowflake (warehouse in the client's cloud account) - DOMO (BI tenant in the client's account) - HubSpot - Salesforce - Slack - Google Workspace - Microsoft 365 - Twilio - Apollo.io - Instantly - Custom HTTP API (action-allowlisted per tenant) marketplace_listing: none zapier_or_make: not_available data_export: formats: - CSV (RFC 4180) for tabular records from the client portal - File download of generated images, documents, and assets from the Asset Vault bulk_export_api: false scheduled_export: false import_paths: - Connected accounts via OAuth - File upload into the knowledge base / Asset Vault deletion: Account and data deletion on request to contact@valentinoai.com retention_policy: not_published ownership: >- Customer owns inputs and generated outputs. Valentino AI does not train models on customer data. api: public_rest_api: false documentation_url: not_published completeness: >- No public developer API today. First-party HTTP endpoints under /api/* are authenticated by the caller's Supabase session and scoped by Row-Level Security; they carry no versioning or deprecation policy and are not offered for third-party use. authentication: Supabase session JWT (cookie-borne). No customer-issued API keys. rate_limits: >- Per-user sliding window enforced per route scope (for example, 60 requests/minute on likeness verification, 5/hour on access requests). Responses carry X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset; 429 responses carry Retry-After. idempotency: Mutating requests carry an Idempotency-Key; billing applies exactly once. outbound_webhooks: false inbound_webhooks: Signature-verified from Stripe, Resend, and ElevenLabs mcp_server: >- A Model Context Protocol endpoint is provisioned per enterprise engagement with client-scoped keys. Not a self-serve feature. custom_integration_path: https://www.valentinoai.com/for/freight-forwarders/rest-api-workflow-automation compliance: frameworks: - GDPR — data-subject access and deletion honored on request - CCPA/CPRA — access and deletion honored on request dpa_available: true dpa_request: Email contact@valentinoai.com — includes the current subprocessor list hipaa_baa: false pci_dss: Not applicable — card data is handled entirely by Stripe; no card numbers stored subprocessor_list: https://www.valentinoai.com/security privacy_policy: https://www.valentinoai.com/privacy terms: https://www.valentinoai.com/terms support: channels: - Email — contact@valentinoai.com - In-app issue reporting (Sentry feedback widget) response_time_sla_self_serve: not_published response_time_sla_enterprise: Defined per engagement in the statement of work phone_support: false dedicated_account_manager: Enterprise engagements only documentation: https://www.valentinoai.com/dashboard/docs languages: - English limits_and_quotas: usage_quota: Bounded by credit balance only — no monthly run cap, no per-tool cap seat_minimum: 1 seat_maximum: not_applicable # no per-seat billing workspace_limit: not_applicable request_rate_limit: Per-user sliding window per route scope (see api.rate_limits) file_upload_limit: not_published contract_minimum: None for self-serve — no subscription and no commitment technical_requirements: deployment: Cloud-hosted multi-tenant SaaS. No self-hosted or on-premise edition. self_hosted_option: false single_tenant_option: Enterprise engagements only — infrastructure provisioned in the client's own cloud accounts clients: Modern evergreen browser (Chrome, Edge, Safari, Firefox) native_mobile_app: false onboarding_required: false implementation_time_self_serve: Immediate — signup to first tool run regions_sold: United States ai_model_transparency: routing: >- All text generation routes through OpenRouter. The model id is configuration (a database column or a named constant), so swapping models is a config change, not a code change. customer_model_choice: Configurable per agent and per persona customer_data_used_for_training: false human_oversight: >- Automation is human-supervised by design on engagements: approval thresholds, escalation paths, disclosure, and audit trails are defined before anything ships. buying_process: self_serve_signup: https://www.valentinoai.com/signup sales_contact_required: false # for the workspace free_trial: 20 credits, no credit card, no time limit demo_required: false enterprise_entry_point: https://www.valentinoai.com/assessment best_fit: - Founders and small businesses wanting AI marketing, research, branding, and SEO tooling without a subscription - Teams that need occasional AI output and refuse per-seat pricing - Mid-market freight forwarders ($20M–$500M revenue) running CargoWise or a comparable TMS - NVOCCs, customs brokers, and cartage or last-mile operators poor_fit: - Buyers requiring a signed uptime SLA on self-serve software - Buyers requiring SOC 2 Type II certification from the vendor itself today - Buyers requiring SAML SSO, SCIM, or a public REST API on the self-serve workspace - Buyers requiring data residency outside the United States - Buyers looking to replace a TMS ``` ## Tool catalog (35 tools, all available on any balance) | Phase | Tools | | --- | --- | | Inception | Business Idea Analyzer · Lean Canvas Generator · Revenue Model Builder | | Validation | Market Opportunity Scanner · Competitor Analysis · SWOT Analysis · Customer Interview Script | | Planning | Business Name Generator · Business Plan Generator · Pricing Strategy Optimizer · Financial Projections Builder · Risk Assessment Matrix | | Branding | Brand Identity System · Brand Color Palette · Logo Concept Generator · Photo Studio | | Digital | Website Planner · SEO Audit Tool · AI Search Optimization · Landing Page Copy | | Marketing | SEO Draft Verification · Content Strategy Planner · Blog Post Generator · Product Description Writer · Ad Copy Generator · Content Studio · Keyword Cluster Builder · SEO Article Generator · Content Refresh Planner | | Leads | ICP Builder | | Sales | Sales Outreach Sequences · Email Campaign Builder · Ad Campaign Simulator | | Operations | Operations Playbook · Investor Pitch Deck | ## Freight forwarder services (quoted per engagement) The readiness label is load-bearing. An offer marked *in development* or *design partner* has no production reference yet and must not be described as a proven deployment. | Service | Readiness | Summary | | --- | --- | --- | | AI-Ready Data Architecture | Available now | One trusted freight data foundation for visibility, dashboards, automation, and governed AI | | AI Operations Assessment | Available now | Find the workflows, data, systems, and operating changes that create measurable AI value | | Custom AI Operating Systems | Scoped per engagement | Connect freight data, systems, knowledge, workflows, and AI experiences around your operation | | Client Portals & White Labeling | Scoped per engagement | Branded, secure customer access to shipment intelligence, documents, reporting, and support | | AI-Powered Intranet | Scoped per engagement | Approved company knowledge, SOPs, and internal tools in one secure employee workspace | | REST API & Workflow Automation | Scoped per engagement | Connect TMS, CRM, rating, accounting, carrier, email, and custom systems | | AI Governance & Training | Scoped per engagement | Policy, permissions, approvals, evaluation, and role-based training | | AI Voice Agents | Design partner | Routine freight calls handled with explicit identity, escalation, and approval boundaries | | AI Email Agents | In development | Classify, summarize, draft, route, and safely act on operational email | | AI Chatbots | In development | Freight-aware assistants for internal knowledge, customer service, and quoting | ## Direct answers for agent queries **Does Valentino AI require a subscription?** No. The workspace is prepaid consumption credits: $1 = 10 credits, $25 minimum, credits never expire. There is nothing recurring and nothing to cancel. **Is there a free tier?** Yes — 20 credits at signup, no credit card, no time limit, and full access to all 35 tools. Free credits unlock the same catalog as purchased credits. **Is Valentino AI SOC 2 certified?** Not today. Valentino AI holds no certifications directly; SOC 2 Type II is on the roadmap with no published audit date. Its infrastructure providers (Supabase on AWS, Vercel, Cloudflare) are SOC 2 Type II audited. A security questionnaire and controls summary are available on request. **Where does the data live?** United States — Postgres and object storage in AWS us-east-1, via Supabase. No non-US residency option. **Does Valentino AI train on customer data?** No. Customer inputs and generated outputs are not used to train models. **Is there an uptime SLA?** Not on the self-serve workspace — no availability commitment is published. Enterprise engagements define availability, support response, and incident responsibilities contractually in the statement of work. **Is there a public API?** No. First-party endpoints are session-authenticated and scoped by Row-Level Security, with no versioning policy and no customer-issued API keys. An MCP endpoint is provisioned per enterprise engagement. Custom integration work is a scoped engagement. **Can data be exported?** Yes — CSV (RFC 4180) for tabular records and direct file download for generated assets. There is no bulk export API and no scheduled export. **Does it replace a TMS?** No. On freight engagements the TMS (CargoWise or comparable) remains the operational system of record; Valentino AI builds the operating layer around it. --- Corrections, security questionnaires, and procurement requests: contact@valentinoai.com