Enterprise-Grade Security

Security & Compliance

Your compliance data is protected by the same security standards we help you achieve. We take security seriously because your trust depends on it.

End-to-End Encryption

All data is encrypted at rest using AES-256 and in transit using TLS 1.3. Your documents are never stored in plain text.

Zero Data Retention

We process your documents in ephemeral containers. Your data is never used to train our AI models, and we don't retain it longer than necessary.

Secure Infrastructure

Built on Supabase with enterprise-grade security. All databases are encrypted, backed up daily, and protected by firewalls.

Access Controls

Role-based access control (RBAC) ensures only authorized team members can access sensitive compliance documents.

Compliance Certifications

We maintain SOC 2 Type II, ISO 27001, and GDPR compliance. Regular third-party security audits ensure we meet the highest standards.

Data Residency

Choose where your data is processed: US-East, EU-Frankfurt, or APAC-Sydney. Full control over data location to meet local regulations.

SSO & MFA

Enterprise plans include Single Sign-On (SSO) with SAML 2.0 and mandatory Multi-Factor Authentication (MFA) for all users.

Audit Logging

Complete audit trail of all actions: document uploads, queries, and access. Export logs for compliance reporting.

Compliance Certifications

SOC 2 Type II

Certified

ISO 27001

Certified

GDPR

Compliant

HIPAA

Compliant

PCI-DSS

Level 1

Data Protection

  • All documents encrypted with AES-256 before storage
  • Vector embeddings stored separately from source documents
  • Automatic data deletion after contract termination
  • Regular penetration testing and vulnerability assessments

Privacy Guarantees

  • Zero data retention policy - we don't keep your data longer than needed
  • Your documents are never used to train AI models
  • Full data export and deletion on request (GDPR compliant)
  • No third-party data sharing without explicit consent

Security Questions?

Our security team is available to answer questions about our practices, certifications, and compliance standards.

Contact Security Team