Built for sensitive production environments.
Security controls are designed around least privilege, data minimization, traceability, and human control. We do not claim certifications we have not earned.
Book a DemoAccess and actions
Connections are read-only by default. Permissions are scoped to the metadata needed for investigations, with role-based controls and auditable human approval for production actions.
- Read-only default
- Least privilege
- Role-based access
- Audit logs
- Human approval
Data protection
Customer data is encrypted in transit and at rest. Retention is configurable and customer-data deletion is supported.
- Encryption in transit
- Encryption at rest
- Configurable retention
- Customer-data deletion
AI data handling
Customer data is not used to train shared models. Investigation context is processed only to provide the requested product functionality.
Enterprise roadmap
SSO / enterprise authentication and private deployment options are planned. Availability and requirements are reviewed directly with design partners.
- SSO — Planned
- Private deployment — Planned
Data-processing agreement
A DPA is available for review during commercial and security evaluation.
Subprocessor transparency
A current subprocessor list and change-notification process are available during security review.
Vulnerability disclosure
Security researchers can contact the team to report suspected vulnerabilities. A public disclosure workflow is being formalized.