Enterprise-grade security.
Your data stays private and secure, and encrypted in transit and at rest. We work in line with GDPR, SOC 2 and ISO 27001, and monitor our compliance continuously.
Built in line with the frameworks your security team expects.
We work in accordance with GDPR, SOC 2 and ISO 27001, and our compliance with each is monitored continuously.
GDPR
Your data is processed and stored in the EU, under European data protection law.
SOC 2
Our controls follow the SOC 2 criteria for security, availability and confidentiality.
ISO 27001
We run our information security management in line with ISO 27001.
Trusted data storage
Data residency in the EU
Your data is stored and processed in the EU.
No foundation model training
Your content is never used to train or fine-tune AI models, and it is not shared with AI providers for training.
SOC 2-compliant AI providers
The AI providers we work with are SOC 2 compliant.
Enterprise-grade protection
Encryption at rest and in transit
AES-256 at rest, and TLS 1.2 or higher in transit.
Continuous monitoring
The platform is monitored continuously, and our code and dependencies are scanned for vulnerabilities.
Compliance, monitored
Our controls are tracked continuously against GDPR, SOC 2 and ISO 27001, so we always know where we stand.
Your data. Your decisions.
You stay in control of your data at all times.
Workspace isolation
Every client has its own workspace, and agents only see the workspace they work in.
Single sign-on
Your team signs in with Google SSO.
Data retention
Data is not kept longer than necessary. Our retention policy is 30 days.
Questions security teams ask.
Ask us something elseNo. Your content is never used to train or fine-tune any model, and the AI providers we use are SOC 2 compliant.
In the EU. Your data is stored and processed there, under GDPR.
With AES-256 at rest and TLS 1.2 or higher in transit.
Only your team. Every client has its own workspace, agents only see the workspace they work in, and your team signs in with Google SSO.
Not yet. We work in line with GDPR, SOC 2 and ISO 27001, and monitor our compliance with each continuously. The trust centre shows where we stand.
Yes. Our trust centre has the documentation, compliance status and data handling policies.
Serious about security?
Visit our trust centre for the full security documentation, compliance status and data handling policies.