Company
Trust, security and privacy
How we secure your data, where it lives, and what we will never do with it.
- SOC 2 Type II
- ISO 27001
- GDPR
- 99.95% uptime
Controls
How the platform is secured
Certifications
SOC 2 Type II and ISO 27001, audited annually. Reports available under NDA.
Data residency
EU, US and APAC regions. Your data stays in the region you select.
Access control
SAML SSO, SCIM provisioning, role-based permissions and full audit trails.
AI data handling
Customer data is not used to train models. Prompts and responses are processed within our tenancy.
Availability
99.95% uptime over the trailing twelve months, with a public status page.
Vendor assurance
Subprocessors published, reviewed annually, with notice before any change.
FAQ
Common security questions
Is customer data used to train AI models?
No. Customer data is never used for model training. Report generation operates on your connected data within our tenancy, and prompts are not retained for training.
Where is data stored?
In the region you select at account creation — EU, US or APAC. Data does not leave that region except where you explicitly export it.
Can we get your SOC 2 report?
Yes, under NDA. Request it through the contact page and it is usually returned within two business days.
How do you handle deletion requests?
Account data is deleted within 30 days of a verified request, including backups on their normal rotation. Deletion is confirmed in writing.
Get started
Need the full security pack?
Request SOC 2, ISO certificates, the DPA and our subprocessor list.
- Live walkthrough of your domain
- 30 minutes, no slide deck
- Named strategist included