Security & Compliance Architecture
Enterprise Grade Security Specification · ABCSoft AI Ops
1. SOC2 Type II Aligned Infrastructure
Our server deployments operate within audited data centers adhering to SOC2 Type II and ISO 27001 physical and logical access standards. Environment variables and database instances are strictly isolated across tenants.
2. Envelope Encryption (AES-256-GCM)
Tokens for Stripe, HubSpot, Google Search Console, and Anthropic are encrypted before ingestion. Rotating the master secret dynamically seals or decrypts credentials strictly within trusted memory spaces.
3. Bring Your Own Key (BYOK) Architecture
For maximum compliance, customers can provide their own Anthropic API key. The key stays on your server, ensuring usage is billed to your Anthropic console and queries never transit through shared multi-tenant keys.
4. Zero LLM Training Guarantee
Under our enterprise API agreement with Anthropic, data processed by Claude 3.7 Sonnet is never retained or utilized for model training. Customer prompts and synthesized metrics remain strictly confidential.
Need a Security Questionnaire Completed?
Our security team responds to enterprise vendor reviews within 24 hours.