These details come from the current product profile and may be vendor-supplied. Treat them as disclosed claims unless a public source or independent evidence is shown, and confirm final requirements with the vendor.
SOC 2 Type I
HIPAA
SOC 2
AES-256 encryption at rest
TLS 1.2+ encryption in transit
Multi-factor authentication enforced for all personnel access to production, source repositories, cloud consoles and admin interfaces
Role-based and least-privilege access control
Just-in-time, time-boxed, approved and logged production access to unmasked claim file data
Quarterly access rights review with revocation within 24 hours of departure or role change
Prohibited shared accounts
Managed secrets service with rotation on departure and at least annually
Customer data never used in development, testing or demonstration environments
Logical tenant isolation by tenant identifier at application and data-access layer
No commingling of customer data across tenants in any index, embedding store, vector database, cache or model artefact
Single-tenant or customer-VPC deployment with infrastructure-layer segregation where specified
No training on customer data
Continuous vulnerability scanning on every build and production image
Annual independent penetration test
Written information security programme reviewed at least annually and after material changes
Documented annual risk assessment
Data retention: Not disclosed
Benchmarks and comparisons
Independent benchmarksStructured task results are being verified.
Side-by-side comparisonsComparison workspaces will be available in a later release.
Tell SOTA2 how you would like to connect. We securely save your request for this company's verified team, whether the profile is claimed now or claimed later. Anonymous visitors stay anonymous.