Loading the SOTA2 catalog…
Zep
Context engineering platform for AI agents. Agent memory, Graph RAG, and automated context assembly from chat history and business data. 200ms retrieval.
- Founded
- 2023
- Headquarters
- San Francisco
- Company size
- 1–10
- Products tracked
- 4
Products by Zep
Customers of Zep
Pricing for Zep
Usage Based, Subscription
This is the broad commercial model reported for Zep. Product-level terms are listed below when available.
- Pricing model
- Usage Based, Subscription
- Entry option
- Free plan and Free trial
- Starting price
- $1,250/ year
- Pricing model
- Open Source
- Entry option
- Free plan and Free trial
- Starting price
- Open-source under permissive license
- Pricing model
- Usage Based, Subscription
- Entry option
- Free plan and Free trial
- Starting price
- $1,250/ year
- Pricing model
- Usage Based, Subscription
- Entry option
- Free plan and Free trial
- Starting price
- $1,250/ year
Trust profile
Security and compliance
SOC 2 Type II
HIPAA
Access Control and Authorization
MFA required for administrative access
MFA required for applications
MFA required for critical services
MFA required for infrastructure access
Password management policy enforced
Password management policy established
Data encrypted at rest
Data encrypted in-transit
Data inventory maintained
Data management and retention policy established
Disaster Recovery
Automated backups enabled
Business continuity and disaster recovery policy established
Data recovery process established
Disaster recovery plans tested
Recovery data isolated
Email Security
DMARC policy and verification used
Email account access restricted
Email settings block malicious content
Endpoint Security
Anti-malware deployed on end-user devices
Automatic session locking enforced
Data encrypted on end-user devices
Firewall maintained on end-user devices
Mobile device management (MDM) used
Software inventory on end-user devices maintained
Infrastructure Security
Active discovery tools used
Anti-malware deployed on infrastructure
Buckets not exposed publicly
Configuration management system established
Firewall restricts public access to infrastructure
Infrastructure changes logged
Infrastructure changes require review
Infrastructure deployed using an infrastructure-as-code tool
Intrusion detection system used
Network infrastructure continuously updated
Production deployment access restricted
Unauthorized assets addressed and removed
Unique production database authentication enforced
VPN used
Web Application Firewall (WAF) used
Monitoring and Incident Response
Adequate audit log storage maintained
Audit log management process maintained
Audit logs collected
Breach notification process established
Incident response policy established
Incident review process implemented
Infrastructure performance monitored
Log management used
Network infrastructure monitored
Organizational Security
Acceptable use policy established
Asset inventory maintained
Asset management policy established
Board meetings conducted
Code of conduct established
Company security commitments externally communicated
Confidentiality Agreement acknowledged by contractors
Confidentiality Agreement acknowledged by employees
Data-flow diagrams maintained
External support resources available (i.e., documentation)
Offboarding process established
Onboarding process established
Performance evaluations conducted
Physical access restricted
Physical security policy established
Policies signed by relevant personnel
Reference checks performed for employees
Roles and responsibilities specified
Sanction policy established
Security awareness training conducted
Security official assigned
Service description communicated
Software development lifecycle established
System changes externally communicated
System changes internally communicated
Vendor agreements established
Workstation use and security policy established
Risk Management
Cybersecurity insurance maintained
Risk assessments performed
Risk management policy established
Vendor inventory maintained
Vendor management program established
Vulnerability Management
Automated software patch management performed
Penetration testing findings remediated
Penetration testing performed within the last 12 months
Vulnerabilities scanned
Vulnerability management policy established