Infrastructure and encryption
- AWS us-east-1 and us-west-2
- AES-256 at rest
- TLS 1.3 in transit
- Logical multi-tenant isolation using tenant_id partitioning
Security & trust
System visibility, never employee surveillance.
Verified controls for infrastructure, data protection, access, AI processing, and human authority.
Access and human authority
- Super Admin, Admin, Editor, Viewer
- Human Confirm or Edit is required before Workflow Map state changes
- Every state-changing suggestion remains human-approved.
AI processing
- OpenAI Enterprise through Azure
- Zero retention for training
- Customer data is not used to train global models
Compliance
- SOC 2 Type II attestation dated November 2025
- GDPR compliant; DPA available