Compliance
Continuously monitoringSecurity at a glance
- Encrypted everywhere TLS 1.2+ in transit and AES-256 at rest, with keys held in a managed key service.
- Your data never trains models Model providers are contracted to keep nothing and train on nothing.
- Everything is on the record Every read, change and decision is recorded, permanently.
Resources
Request documents- Security overviewPublic
- Responsible disclosure policyPublic
- Penetration test summaryOn request
- Completed security questionnaireOn request
- Data Processing AddendumOn request
- Information security policyOn request
- Incident response planOn request
- Business continuity and disaster recovery planOn request
- Data retention and deletion policyOn request
Controls
All 38 controls-
Infrastructure security
The production environment and the network around it.
-
Organisational security
The people with access and how they are held to it.
-
Product security
How Cases protects your cases inside the application.
-
Data and privacy
What happens to your data, where it lives and how it leaves.
-
AI governance
How models are used on your documents, and what they are never allowed to do.
-
Internal security procedures
How the programme is run, measured and improved.