- SECURITY
Security & Data Handling
Your data stays under your control. Enterprise-grade security, compliance, and access controls built in.
How We Protect Your Data
Encryption at Rest and in Transit
All data is encrypted using AES-256 when stored and TLS 1.3 when transmitted. Encryption keys are managed through industry-standard key management systems.
Permission-Aware Access
Cloud AI Manager inherits permissions from source systems. Users only see search results they’re authorized to access in the original platforms.
SOC 2 Type II Certified
Our infrastructure and processes are audited annually against SOC 2 Type II standards for security, availability, and confidentiality.
SSO and SAML Support
Integrate with your existing identity provider. Support for Okta, Azure AD, Google Workspace, and other SAML 2.0 providers.
Audit Logs
Comprehensive logging of user activity, data access, and system events. Logs are tamper-proof and retained for compliance requirements.
Data Isolation
Each customer’s data is logically isolated. No cross-customer data leakage is possible. Multi-tenant architecture with strict boundaries.
Compliance & Certifications
SOC 2 Type II
Security, availability, confidentiality
GDPR
European data protection compliance
CCPA
California privacy rights
HIPAA
Available for healthcare customers
How We Use Your Data
What we do
- Index your data to provide search functionality
- Store indexed content in encrypted databases
- Use your data to answer your team's queries
- Generate anonymized usage analytics for product improvement
What we never do
- Train AI models on your data
- Share your content with third parties
- Sell usage insights or metadata
- Allow cross-customer data access
- Use your data for marketing or advertising
Data Retention & Deletion
You control your data. Disconnect an integration and we stop indexing new content. Delete your account and we purge all indexed data within 30 days.
For HMS merchants, data is retained as long as your merchant account is active. If you stop using HMS services, your Cloud AI Manager data is deleted after a 90-day grace period unless you transition to standard licensing.
