Resources · Guide

Security review checklist

The questions security teams ask in procurement — and where the answer lives in the product.

Browse all resources Discuss with a specialist

3 minEstimated reading timeJuly 29, 2026Last reviewedSecurity, compliance, risk and procurement teamsIntended audience

Data protection

Encryption: TLS in transit, per-tenant KMS keys at rest; BYOK supported, HYOK available as an enterprise add-on.
Residency: tenants are pinned to a region; data and AI processing stay inside it.
Malware: every inbound object is scanned in quarantine before it is reachable.

Access & accountability

Deny-by-default scopes with least-privilege roles.
Complete audit trail with actor, resource and before/after state.
Forensic watermarking with a trace tool for leaked fragments.

AI posture

Tenant-isolated AI; content never trains models; per-tenant kill switch; machine-readable transparency report at GET /v1/ai/transparency.
Answers are labeled and always cite their sources (EU AI Act Article 50 posture documented on the AI transparency page).

Vulnerability handling

Published disclosure policy with safe harbor and RFC 9116 security.txt.
Acknowledgement within 3 business days; triage within 10.

Apply this guidance to your environment.

Bring your requirements, current architecture, and rollout constraints to a focused working session with our enterprise team.

Schedule a working session Browse more guides