Built to be trusted.
Your data is masked in memory and never stored. Here is how.
Built to be trusted.
Your data is masked in memory and never stored. Here is how.
Built to be trusted.
Your data is masked in memory and never stored. Here is how.
Compliance
Audited, not just promised.
SOC 2
Type II
ISO
27001
GDPR
Ready
HIPAA
Eligible
Compliance
Audited, not just promised.
SOC 2
Type II
ISO
27001
GDPR
Ready
HIPAA
Eligible
Compliance
Audited, not just promised.
SOC 2
Type II
ISO
27001
GDPR
Ready
HIPAA
Eligible
Data handling
What we keep.
Short answers for your review team.
Topic
Cloud
Self-host
Input text
Processed in memory, never stored
Never leaves your network
Audit log
Field type and time only
Stored in your database
Region
EU, US or Gulf
Your choice
Encryption
TLS 1.3 in transit, AES-256 at rest
Your keys
Token keys
Customer managed
Customer managed
Data handling
What we keep.
Short answers for your review team.
Topic
Cloud
Self-host
Input text
Processed in memory, never stored
Never leaves your network
Audit log
Field type and time only
Stored in your database
Region
EU, US or Gulf
Your choice
Encryption
TLS 1.3 in transit, AES-256 at rest
Your keys
Token keys
Customer managed
Customer managed
Data handling
What we keep.
Short answers for your review team.
Topic
Cloud
Self-host
Input text
Processed in memory, never stored
Never leaves your network
Audit log
Field type and time only
Stored in your database
Region
EU, US or Gulf
Your choice
Encryption
TLS 1.3 in transit, AES-256 at rest
Your keys
Token keys
Customer managed
Customer managed
Threat model
Four rules we never break.
01
No raw logs
Raw text is never written to disk.
02
Keys stay yours
Token keys never leave your account.
03
Least access
Staff cannot read customer traffic.
04
Prove it
Every action is in an exportable log.
Threat model
Four rules we never break.
01
No raw logs
Raw text is never written to disk.
02
Keys stay yours
Token keys never leave your account.
03
Least access
Staff cannot read customer traffic.
04
Prove it
Every action is in an exportable log.
Threat model
Four rules we never break.
01
No raw logs
Raw text is never written to disk.
02
Keys stay yours
Token keys never leave your account.
03
Least access
Staff cannot read customer traffic.
04
Prove it
Every action is in an exportable log.
Subprocessors
Who touches the service.
Name
Purpose
Region
Cloud host A
Compute
EU, US, Gulf
Cloud host B
Object storage
EU, US
Mail provider
Account email
EU
Subprocessors
Who touches the service.
Name
Purpose
Region
Cloud host A
Compute
EU, US, Gulf
Cloud host B
Object storage
EU, US
Mail provider
Account email
EU
Subprocessors
Who touches the service.
Name
Purpose
Region
Cloud host A
Compute
EU, US, Gulf
Cloud host B
Object storage
EU, US
Mail provider
Account email
EU