Enterprise-Grade Security For Your Most Critical Assets

All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.3. We use hardware security modules (HSM) for key management and offer customer-managed encryption keys for enterprise customers.

No, absolutely not. Your data is never used to train our AI models. We maintain strict data isolation between customers, and your information is used solely to provide you with our services.

Data is stored in SOC 2 Type II certified data centers. We offer data residency options for customers who need their data stored in specific geographic regions to comply with local regulations.

We have a comprehensive incident response plan that includes immediate containment, investigation, and customer notification within 72 hours of discovery. We also maintain cyber insurance and regularly test our incident response procedures.

We maintain SOC 2 Type II, ISO 27001, and are GDPR, CCPA, and HIPAA compliant. We also participate in third-party penetration testing and maintain a bug bounty program.

All employees undergo background checks and security training. We enforce the principle of least privilege, require MFA for all systems, and conduct regular access reviews. Employees sign confidentiality agreements and receive ongoing security awareness training.

Yes, we provide SOC 2 Type II reports and security questionnaire responses to customers under NDA. Enterprise customers can also request custom security assessments and on-site audits.

Upon cancellation, you can export all your data. After a 30-day grace period, all customer data is securely deleted from our systems, including backups, within 90 days. We provide a certificate of data destruction upon request.