Security and compliance aren't a feature flag — they're the foundation. Here's the short version.
Independently audited annually against the Trust Services Criteria. Report available under NDA.
TLS 1.3 in transit. AES-256 at rest. Per-tenant data keys with quarterly rotation.
SSO + SCIM, role-based access controls, just-in-time production access with full session capture.
Logical isolation by default; private VPC / single-tenant deployment available on Enterprise.
Every reviewer action — approval, edit, bulk update — is recorded with actor identity and before/after values.
Customer documents never enter shared training data. Opt-in private fine-tuning stays in your instance.
We'll send the latest report under NDA within one business day.