Our commitments
- Your data is yours. We never use customer data to train shared models.
- Encryption everywhere: AES-256 at rest and TLS 1.3 in transit.
- Zero-trust access for every person, service and AI agent.
- Immutable audit logs for every administrative and automated action.
- Data residency controls across 13 regions, plus sovereign and air-gapped options.
Compliance alignment
Our security program is built to align with SOC 2, ISO 27001, HIPAA, GDPR and FedRAMP-moderate control frameworks. Customers can request our current security documentation, including policy summaries and penetration test summaries, under NDA through the contact page.
Security practices
- Secure development lifecycle with code review and automated scanning
- Regular third-party penetration testing
- Least-privilege access with multi-factor authentication for all personnel
- Continuous monitoring, threat detection and incident response
- Background checks and security training for personnel
- Business continuity and disaster recovery testing
Privacy
We process personal data in line with our Privacy Policy and Data Processing Addendum. Healthcare customers may request a Business Associate Agreement.
Report a concern
If you believe you have found a security vulnerability, please follow our Security Disclosure policy.