Security & Compliance
SmartSolo is built with enterprise security from day one. Every AI decision your team makes runs through verified, compliant infrastructure — with a full audit trail and governance controls built in.
Certifications & Compliance
SmartSolo has completed an independent SOC 2 audit verifying our controls for security, availability, and confidentiality. Customers can request our SOC 2 report under NDA.
We are fully compliant with the EU General Data Protection Regulation. EU customer data is processed and stored in accordance with GDPR requirements, including data subject rights and transfer mechanisms.
SmartSolo meets Cloud Application Security Assessment (CASA) Tier 3 standards, assessed by an authorized lab. This means your data flows through verified, security-reviewed infrastructure.
How We Protect Your Data
Encryption at rest and in transit
All data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher. Encryption keys are managed through a dedicated key management service.
Immutable audit trail
Every AI-assisted decision is recorded in a tamper-evident ledger — what was asked, which model answered, and what action was taken. This record is available for compliance review at any time.
Role-based access control
Granular RBAC lets administrators define exactly which teams can access which models, data sources, and features. Principle of least privilege is enforced by default.
Deployment options
SmartSolo is available as a cloud-hosted SaaS or as an on-premise deployment for organizations with strict data residency requirements.
Vulnerability management
We run continuous dependency scanning, static analysis, and penetration tests. Critical vulnerabilities are patched within 24 hours of discovery.
Subprocessor transparency
We publish a full list of subprocessors and notify customers of any changes at least 30 days in advance.
Responsible Disclosure
If you discover a security vulnerability in SmartSolo, please report it responsibly. We review all reports promptly and will work with you to resolve verified issues.
Need more detail?
Enterprise customers can request our SOC 2 report, Data Processing Agreement, and subprocessor list. Get in touch with our team.
Also see our Privacy Policy and Enterprise page.