Security

We treat the catalogs and conversations you trust us with as if they were our own. Here's a quick rundown of how we keep them safe.

Infrastructure

• Hosted on SOC 2-attested cloud infrastructure.
• All traffic encrypted in transit (TLS 1.2+).
• Data at rest encrypted with AES-256.
• Database access scoped per workspace with row-level security.

Tenant isolation

Uploads to a workspace are private to that workspace by default. Catalogs flagged as public are reviewed before they ship to the shared knowledge base. We do not train shared models on private workspace contents.

Access control

• SSO available on the Enterprise plan.
• Role-based access within a workspace.
• Audit logs of administrative actions.

Reporting a vulnerability

Found a bug that affects security? Please email security@signalhvac.io with reproduction steps. We acknowledge inside one business day and aim to triage within five.