Snapshot 223418
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Tego AI | Trust Center Welcome to our Trust Center — a centralized hub for showcasing our commitment to security, privacy, and compliance. Here, you’ll find transparent and up-to-date information about our security practices, compliance certifications, and data protection policies. Compliance Compliance SOC 2 Type II Controls Controls Data Security | (4 Controls) Encryption at rest implemented Encryption in transit implemented Encryption key management process established Network and firewall access restricted Product Security | (7 Controls) Secure Software Development Lifecycle established Penetration Testing conducted Change Management procedures enforced Vulnerability scanning procedures established Access Management | (9 Controls) Role Based Access Control (RBAC) established Multi Factor Authentication implemented User Access Reviews conducted Password policy enforced Security and Continuity Procedures | (7 Controls) Business Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Incident Response plan tested Data backups and restoration procedures tested Organization Security | (9 Controls) Risk Assessment and treatment established Vendor Risk Management established Asset Management maintained Security Awareness Training implemented Endpoint Security | (4 Controls) Endpoint Detection and Response established Disk encryption enforced Threat and Malware protection enforced Endpoint Management policies established Reports and Documents Reports and Documents Tego AI - SOC2 Type2 Report 2026 Policies Policies Risk Assessment and Treatment Policy and Procedure Encryption Key Management Policy Access Control Policy Human Resources Policy and Procedure FAQ FAQ How does Tego AI protect data in transit and at rest? All sensitive data is encrypted both in transit and at rest using industry-standard algorithms. Data in transit is protected using TLS 1.2 or higher, and data at rest is encrypted using AES-256. Tego AI follows NIST FIPS 140-2 and NIST SP 800-57 standards for cryptographic key management, including secure key generation, storage, rotation, and destruction. All key management operations require dual control and split knowledge, ensuring no single individual can access complete key material independently. How does Tego AI manage access to systems and data? Access is granted based on the principles of least privilege and need-to-know. Tego AI maintains a user permissions matrix aligned to roles and departments, enforces Multi-Factor Authentication (MFA) across all systems containing sensitive data, and conducts biannual access reviews to ensure permissions remain appropriate. Privileged access is time-bound, logged, and requires documented approval from the employee's manager and the relevant business owner. Subprocessors Subprocessors Anthropic - Large Language Model AWS - Cloud service provider Azure - Cloud service provider GCP - Cloud service provider GitHub - Code hosting and collaboration platform for software development teams. Google Analytics - Web analytics service to track and report website traffic.