AccuroAI
Platform
What We Do
Solutions
Company
Resources
Book demo
Security
Trust is engineered, not promised.

AccuroAI protects the most sensitive prompt data on the planet. Here's exactly how we are aligned with.

Visit the Trust CenterTalk to our security team

Data isolation

  • Per-tenant logical isolation across compute, storage, and metadata.
  • Customer prompts and responses are never used to train AccuroAI models.
  • Optional dedicated VPC and customer-managed keys (BYOK) on the Enterprise tier.

Encryption

  • TLS 1.3 in transit across every external surface.
  • AES-256 at rest for prompts, redaction tokens, audit logs, and metadata.
  • KMS-backed key rotation; HSM-stored root keys.

Certifications

  • SOC 2 Type II (annual) — CC6.1, CC6.6, CC7.2.
  • ISO 27001 + ISO 42001 (AI management system).
  • NIST AI RMF aligned controls and evidence catalogue.
  • HIPAA-ready deployment with signed BAA on the Enterprise tier.
  • EU AI Act Article 9 + Article 10 risk-management evidence on tap.

Access control

  • SSO via SAML / OIDC. SCIM provisioning. Just-in-time access.
  • Role-based access with least-privilege defaults.
  • Tamper-evident audit log of every administrative action.

Vulnerability management

  • Continuous SAST + DAST in CI. SCA on every dependency change.
  • Quarterly third-party penetration tests; annual red-team engagement.
  • Public Trust Center with sub-processor list and incident history.

Responsible disclosure

  • Coordinated-disclosure program with safe-harbor for good-faith research.
  • Report security issues to security@accuroai.co — PGP key on the Trust Center.
  • Acknowledgement within 24 hours; remediation SLA based on severity.
Book a demoTalk to security