SECURITY
Security and compliance.
Every deployment runs in a VPC dedicated to you, inside our SOC 2 Type 2 certified cloud. Here is how it's built, certified, and operated.
ISOLATION BY DESIGN
One tenant per boundary. No shared plane.
VPC dedicated to youEvery customer deployment runs inside its own private network, provisioned at onboarding and destroyed at offboarding.
No shared infrastructureWorkloads in one customer's deployment cannot see, route to, or address workloads in another's.
Zone-locked sessionsAuth scopes every token to the app that issued it — tokens cannot replay across deployments.
Audited end-to-endEvery change to a deployment is written to an audit log you can read.
SERVICE COMMITMENTS
Security
- Access controlRole-based access with least privilege, so users cannot reach information outside their role.
- Intrusion detectionNetwork- and host-level monitoring on every deployment.
- Vulnerability managementRegular vulnerability scans across infrastructure and network, and penetration tests against production.
- Incident responseDocumented triage, containment, and notification procedures. On-call rotation 24/7.
- EncryptionCustomer data is encrypted at rest and in transit on every deployment.
- Data retention and disposalRetained per contract and destroyed at offboarding using industry-standard secure disposal.
Confidentiality
- NDAsIn place with every employee, contractor, and third party that touches customer systems.
- EncryptionSystem data is encrypted at rest and in transit across every deployment we host.
- Your data belongs to youExports, reports, and the full audit trail are yours, exportable at any time.
Availability
- UptimeProduction systems are monitored continuously against the SLA in your contract.
- MonitoringPerformance and availability are monitored across every deployment.
- SupportCustomer requests are answered within the response times set in your SLA.
- Business continuityDocumented BC/DR plans with defined RPOs, RTOs, and roles, tested on a regular cadence.
WHO HOSTS IT
AWS, in a region you choose.
Deployments run in our SOC 2 Type 2 certified cloud on AWS, in a VPC we provision and operate for you, in the region your compliance requires. AI Hero hosts every deployment as your sub-processor or managed service provider, with 24/7 monitoring, an on-call rotation, and an SLA in writing. No customer team is on-call for software AI Hero built.
CONTACT
Security reviews and DPAs.
Send vendor reviews, DPA and BAA requests, or report a vulnerability. For anything else, email [email protected].
[email protected]POLICIES
Terms of Use, Privacy Policy, Cookie Policy, and Disclaimers.