Security
At TrustPointAI, security is key to fulfilling our customer commitment. We take security very seriously. Regular certifications, processes, and audits help us systematically ensure our products remain safe and secure for users.
SOC 2 Type II Compliant
We have completed an independent SOC 2 Type II audit across all five Trust Services Criteria (TSC), demonstrating our commitment to the highest security, confidentiality, and data integrity standards.
How we protect you
Our security program is built on industry best practices and continuous improvement.
- Third-party library scanning
- Least-privilege access controls
- Network segmentation
- SPF and DMARC email authentication
- Data segregation
- SSO and secure service authentication
- Intrusion detection and prevention
- Infrastructure as code
- Peer-reviewed code
- Continuous vulnerability scanning
Our security commitments
Data Encryption
All data is encrypted at rest and in transit using industry-standard AES-256 and TLS 1.2+ encryption.
Access Controls
Role-based access control with multi-factor authentication and detailed audit logging for all system access.
Continuous Monitoring
24/7 security monitoring with real-time threat detection and automated incident response protocols.
Compliance Audits
Regular third-party security audits and penetration testing to identify and address potential vulnerabilities.
Secure Infrastructure
Hosted on enterprise-grade cloud infrastructure with redundancy, disaster recovery, and high availability.
Security Training
All team members undergo regular security awareness training and follow strict security protocols.
Responsible disclosure
At TrustPointAI, security is a top priority. We encourage responsible disclosure of any vulnerabilities through our Bugcrowd Vulnerability Disclosure Program. If you discover a security issue, please submit it via our disclosure form.
We appreciate your efforts in helping us maintain a secure platform. When reporting, please include steps to reproduce (if possible), the affected product or component, and the potential impact. We will acknowledge receipt and respond as quickly as we can.
Questions about security?
Our security team is available to answer questions about our security practices, compliance certifications, and enterprise security questionnaires.