Secure by design. Governed for AI.

Security controls for your firm

• SOC 2 Type II

  Independent audits verify that our security controls work over time. The report is available for your review.

• Encryption throughout

  Your data is encrypted with AES-256 at rest and TLS 1.2+ in transit. Encryption keys are managed through AWS KMS.

• No model training

  Your firm’s data is never used to train AI models. Our agreements with every model provider prohibit it.

• Single sign-on

  Connect your identity provider with SAML SSO. Multi-factor authentication is available for all users.

• Role-based access

  Granular permissions keep access tied to each person’s role, with regular reviews and automated deprovisioning.

• Access audit logs

  Access events are logged so your team can review activity. Suspicious behavior triggers real-time alerts.

• Quarterly security testing

  Independent penetration tests cover our infrastructure, applications, and APIs, alongside continuous vulnerability scanning.

• Monitored infrastructure

  Hosted on AWS in the US, with continuous monitoring, network isolation, and protection against malicious traffic.

• Scoped AI processing

  Only the context needed for a task is sent to AI providers. Credentials and other customers’ data stay out.