Zep
Context engineering platform for AI agents. Agent memory, Graph RAG, and automated context assembly from chat history and business data. 200ms retrieval.
Where Zep ranks
Current edition · updated Oct 20, 2026About Zep
Zep assembles the right context from chat history, business data, and user behavior so agents are personalized, accurate, and fast. Our open source project Graphiti hit 20k GitHub stars in under 12 months. Sub-200ms retrieval, SOC 2 Type 2/HIPAA certified, used by teams from startups to Fortune 500s.
Products
Persistent memory for AI agents.
Open-source Context Graph framework that powers Zep.
Millions of context graphs, governed and served as one system.
Zep's proprietary runtime for the Context Lake.
What customers say
“Zep is one of the most exciting things I've seen for real-world agent use cases in a long time.Ken CollinsVP of Product, Torq and GenAI Expert”
“I only wear Adidas shoes. I love them!”
“Zep is one of the most exciting things I've seen for real-world agent use cases in a long time.”
Security and compliance
As reported by Zep. Ask for audit reports before you buy.
- SOC 2 Type IICompliant
- HIPAACompliant
- Access Control and Authorization
- MFA required for administrative access
- MFA required for applications
- MFA required for critical services
- MFA required for infrastructure access
- Password management policy enforced
- Password management policy established
- Data encrypted at rest
- Data encrypted in-transit
- Data inventory maintained
- Data management and retention policy established
- Disaster Recovery
- Automated backups enabled
- Business continuity and disaster recovery policy established
- Data recovery process established
- Disaster recovery plans tested
- Recovery data isolated
- Email Security
- DMARC policy and verification used
- Email account access restricted
- Email settings block malicious content
- Endpoint Security
- Anti-malware deployed on end-user devices
- Automatic session locking enforced
- Data encrypted on end-user devices
- Firewall maintained on end-user devices
- Mobile device management (MDM) used
- Software inventory on end-user devices maintained
- Infrastructure Security
- Active discovery tools used
- Anti-malware deployed on infrastructure
- Buckets not exposed publicly
- Configuration management system established
- Firewall restricts public access to infrastructure
- Infrastructure changes logged
- Infrastructure changes require review
- Infrastructure deployed using an infrastructure-as-code tool
- Intrusion detection system used
- Network infrastructure continuously updated
- Production deployment access restricted
- Unauthorized assets addressed and removed
- Unique production database authentication enforced
- VPN used
- Web Application Firewall (WAF) used
- Monitoring and Incident Response
- Adequate audit log storage maintained
- Audit log management process maintained
- Audit logs collected
- Breach notification process established
- Incident response policy established
- Incident review process implemented
- Infrastructure performance monitored
- Log management used
- Network infrastructure monitored
- Organizational Security
- Acceptable use policy established
- Asset inventory maintained
- Asset management policy established
- Board meetings conducted
- Code of conduct established
- Company security commitments externally communicated
- Confidentiality Agreement acknowledged by contractors
- Confidentiality Agreement acknowledged by employees
- Data-flow diagrams maintained
- External support resources available (i.e., documentation)
- Offboarding process established
- Onboarding process established
- Performance evaluations conducted
- Physical access restricted
- Physical security policy established
- Policies signed by relevant personnel
- Reference checks performed for employees
- Roles and responsibilities specified
- Sanction policy established
- Security awareness training conducted
- Security official assigned
- Service description communicated
- Software development lifecycle established
- System changes externally communicated
- System changes internally communicated
- Vendor agreements established
- Workstation use and security policy established
- Risk Management
- Cybersecurity insurance maintained
- Risk assessments performed
- Risk management policy established
- Vendor inventory maintained
- Vendor management program established
- Vulnerability Management
- Automated software patch management performed
- Penetration testing findings remediated
- Penetration testing performed within the last 12 months
- Vulnerabilities scanned
- Vulnerability management policy established
SubprocessorsJuno
Is this your company?
Claim the profile to keep facts current, answer buyers and submit evidence for the next ranking review.
Claim Zep