Security & Compliance

Built for buyers with demanding compliance teams.

Per-tenant isolation. Encryption everywhere. SOC 2 in flight. Insurance in place.

Data isolation

Per-tenant logical isolation at API gateway, database, and storage. Verified at every layer.

Encryption

AES-256 at rest. TLS 1.3 in transit. Modern ciphers only.

SOC 2 roadmap

Type I in flight (Q3 2026). Type II by Q1 2027. Reports under NDA.

Penetration testing

Annual at Tier 3-4. P0/P1 findings remediated within 5 business days.

Telemetry transparency

We see system health metrics. Not query content, report content, or entities.

Insurance

$5M cyber liability. $5M E&O. $1M GL. Active from Day 1.

Air-gapped option

Tier 4B Appliance ships hardware to your data center. No outbound except signed updates.

Source-code escrow

Available at Enterprise. NCC Group. Release on bankruptcy, acquisition, or breach of MSA.

Incident response

Documented plan. 0-1-2-4-24-48 hour timeline. Customer notified within 48 hours.

Read our DPA Request security questionnaire