SecuritAI Trust Center: your data, your control.
SecuritAI is built by a cybersecurity team, so security and privacy are the foundation, not features bolted on. This is exactly how we protect your data, where it lives, and the standards we align to.
AI security and trust pillars
Data residency
Prompt inspection and logs stay in Canada.
No training on your data
Your prompts and responses are never used to train any model.
Encryption
In transit.
Audit logging
Full, exportable records of every request and block.
Access control
Role-based access, tenant isolation, API-key scoping.
Deployment choice
Managed (Canada), private-VPC, or on-prem / air-gapped.
Standards alignment
Aligned to the NIST AI Risk Management Framework, the OWASP Top 10 for LLM Applications, CCCS guidance, and PIPEDA; aligned to NIST AI RMF and ISO/IEC 42001.
We state alignment and capability, not certifications we don’t yet hold. SOC 2 and formal certifications will be listed here when achieved.
How your data is handled
Every prompt that passes through SecuritAI is inspected in memory, and a short preview of it is logged to your tenant with its block decision. Your data is never used to train any model, never sold, and never shared between tenants. You can export your logs through the API. Inspection and log storage happen in Canada. The call to the AI model, and part of each prompt sent for classification, are processed by our model provider in the United States.
Responsible disclosure
Security researchers: found something? Report it to [email protected]. We respond quickly and credit responsible disclosures.
Security and trust questions
Does SecuritAI train on my data?
No. Your prompts and responses are never used to train any model, never sold, and never shared between tenants. They are inspected in real time and logged only to your own tenant.
Where is my data stored?
Prompt inspection and log storage take place in Canada. The call to the AI model you configure, and up to 2,000 characters of each prompt that our classification layer sends for analysis, are processed by our model provider in the United States. Private-VPC and on-premises deployments let you keep all data inside your own environment.
Can I deploy SecuritAI on-premises or air-gapped?
Yes. SecuritAI offers managed hosting in Canada, deployment into your own private VPC, and fully on-premises or air-gapped installation for government and critical infrastructure.
Is SecuritAI SOC 2 or ISO 27001 certified?
SecuritAI is aligned to the NIST AI Risk Management Framework, the OWASP LLM Top 10, CCCS guidance, and PIPEDA. We state alignment and capability honestly and do not claim certifications we do not yet hold. SOC 2 and formal certifications will be listed here when achieved.
What does SecuritAI log, and can I export it?
SecuritAI logs a short preview of each prompt together with its block decision, and you can export the log through the API. The log supports incident reporting and regulatory review under frameworks like Bill C-8.
Security questions? We have answers.