Security and Compliance
Enterprise protection for sensitive information.
KaiAgentx is built for workflows where information security, privacy, access control, and contractual accountability are essential. Our security program combines documented controls, secure cloud infrastructure, and enterprise agreements.
Control overview
Controls, and what backs them.
SOC 2 Type II Certified
Confirmed in scoping
KaiAgentx is SOC 2 Type II certified, with controls covering the security, availability and confidentiality of customer information.
GDPR & HIPAA Ready
Reviewed per engagement
KaiAgentx is GDPR and HIPAA ready and supports med-legal and other workflows that can involve protected health information. The obligations that apply, and whether a Business Associate Agreement is put in place, are confirmed for each engagement.
Encryption
End-to-end
Customer information is protected by end-to-end data encryption, in transit and at rest.
Access control
Role-based
Role-based access controls help limit information access according to authorized user roles and responsibilities.
Data use
Set by agreement
How customer data may and may not be used, including any restriction on model training, is defined in the customer agreement.
Retention and deletion
Configurable
Data-retention and deletion requirements can be configured according to the customer agreement and implementation.
Cloud infrastructure
Enterprise cloud
KaiAgentx runs on enterprise cloud infrastructure configured for secure, repeatable processing. The specific hosting region and configuration are confirmed during scoping.
Enterprise agreements
Discussed in scoping
Data Processing Agreements, Business Associate Agreements and other contractual requirements are discussed as part of enterprise scoping.
Procurement
Documentation for procurement and security teams.
Qualified enterprise evaluations can request relevant security and compliance documentation, discuss data flows and retention requirements, and review contractual protections such as BAAs and DPAs.
Do not include PHI, confidential records, credentials, or sensitive personal information in a security inquiry.
Request Security DocumentationBuilt for sensitive information and high-stakes work.
If your evaluation has security requirements the page above does not answer, tell us what the review needs to cover and we will route it to the right owner.
Discuss a Data Challenge