Snapshot 224119
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content
Privacy and Security at Serval
Serval is a unified help desk, access management, and automation platform with a built-in AI agent workforce. Deploy AI agents to automate the most challenging help desk requests, build enterprise-grade workflow automations, and surface actionable insights.
security@serval.com
Privacy PolicyOpens in new tab
Security and privacy are core to how Serval is built. Our platform is regularly audited by independent third parties, and data is encrypted in transit and at rest. Serval is SOC 2 Type II, ISO 27001, ISO 42001, HIPAA, and GDPR compliant.
Serval is the AI-native IT service management platform for modern teams. We help organizations resolve employee requests through AI agents that automate help desk responses, workflow execution, access provisioning, onboarding and offboarding, knowledge search, and asset management. Serval is available via cloud-hosted, self-hosted, and hybrid deployment models.
Founded by product and engineering leaders from Verkada, Serval is backed by Sequoia, Redpoint, Meritech, First Round, and General Catalyst, alongside angels including the founders of Verkada and Ramp.
Compliance
SOC 2
ISO 27001:2022
ISO/IEC 42001:2023
HIPAA
GDPR
Resources
View all
Third-Party Assurance
SOC 2 Type II
SOC 2 Type II Bridge Letter-Q4_2026
ISO 27001 Certificate
ISO 42001 Certificate
View 2 more
Policies
Access Control Policy
Asset Management Policy
Business Continuity and Disaster Recovery (BC/DR)
Code of Conduct
View 17 more
Controls
View all
Infrastructure security
Encryption key access restricted
Unique account authentication enforced
Production application access restricted
View 15 more Infrastructure security controls
Organizational security
Portable media encrypted
Anti-malware technology utilized
Confidentiality Agreement acknowledged by contractors
View 2 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 2 more Product security controls
Internal security procedures
Cybersecurity insurance maintained
Configuration management system established
Whistleblower policy established
View 13 more Internal security procedures controls
Subprocessors
View all
Amazon Web Services • cloud hosting/infrastructure
US
Datadog • observability/logging/APM
US
Tailscale • secure network access
US
Temporal Technologies Inc. • workflow orchestration
US
Updates
View all
Privacy
New subprocessor: Vercel Inc. ("Vercel")
Published October 14, 2026
Vercel hosts the Serval web application and related assets, which involves processing access metadata (such as IP addresses and browser information) for users of the application. Vercel also provides AI Gateway, which routes AI requests to Serval's existing AI model providers.
Purpose: Web application hosting and content delivery; AI model routing (Vercel AI Gateway)
Data processed: Access metadata for users of the Serval web application; prompts and model outputs routed to Serval's AI model providers, which may include end-user message content submitted through the platform
Location: United States
Safeguards: Vercel AI Gateway does not retain or log prompt or output content; routing metadata is retained for up to 30 days. Zero data retention and no-training policies are enforced for model providers. SOC 2 Type II, ISO 27001.
Questions For questions or objections, contact privacy@serval.com.
Privacy
New subprocessor: Parallel Web Systems Inc. ("Parallel")
Published September 24, 2026
Serval is adding Parallel Web Systems Inc. ("Parallel") as a subprocessor.
Purpose: Web search and content retrieval that lets Serval's AI agents ground responses in current public web information (for example, vendor status pages and product documentation)
Data processed: Search queries generated by Serval's AI agents, which may include content derived from end-user messages submitted through the Serval platform. Results returned to Serval consist of public web content.
Location: United States
Safeguards: Zero data retention on the Parallel APIs Serval uses (queries and results are not stored after the response is returned, except that content flagged by automated abuse screening may be retained briefly and only as needed to address the flagged issue), no training on customer data, SOC 2 Type II
This update constitutes notice under Section 3.4 of the Serval Data Processing Addendum. The 15-day objection window runs from the date this update is posted, and Parallel will not process customer data before October 8, 2026. Customers whose agreements provide a different notice period will receive direct notice under those terms. Objections or questions can be sent to privacy@serval.com.
Privacy
New subprocessor: TypeSafe AI
Published September 22, 2026
Serval is adding TypeSafe AI, Inc. as a subprocessor.
Purpose: AI model inference for input classification and guardrails in the helpdesk workflow
Data processed: End-user message content submitted through the Serval platform
Location: United States
Safeguards: Zero data retention (inputs and outputs are not stored after the response), no training on customer data, SOC 2 Type II
This update constitutes notice under Section 3.4 of the Serval Data Processing Addendum. The 15-day objection window runs from the date this update is posted, and TypeSafe AI will not process customer data before October 7, 2026. Customers whose agreements provide a different notice period will receive direct notice under those terms. Objections or questions can be sent to privacy@serval.com.
General
Achieving ISO 27001:2022 Certification
Published May 1, 2026
We're pleased to announce that Serval has achieved ISO/IEC 27001:2022 certification, the internationally recognized standard for information security management.
This certification, issued by Advantage Partners (MSCB-389), confirms that Serval has implemented a formal Information Security Management System (ISMS) covering the secure provision of our AI-native IT service management platform, including help desk automation, just-in-time access provisioning, onboarding and offboarding, and AI-powered workflow automation, delivered as a cloud-hosted SaaS service on AWS.
ISO 27001 is not a point-in-time assessment. Maintaining certification requires ongoing internal audits, management reviews, and annual surveillance audits, meaning our security program is subject to continuous independent scrutiny through April 2029.
A copy of our ISO 27001:2022 certificate and Statement of Applicability (SoA) are available upon request via our Trust Center.
Contact trust@serval.com for documentation or security questionnaire support.
Read more about New subprocessor: Vercel Inc. ("Vercel")
Privacy and Security at Serval
Serval is a unified help desk, access management, and automation platform with a built-in AI agent workforce. Deploy AI agents to automate the most challenging help desk requests, build enterprise-grade workflow automations, and surface actionable insights.
security@serval.com
Privacy PolicyOpens in new tab
Security and privacy are core to how Serval is built. Our platform is regularly audited by independent third parties, and data is encrypted in transit and at rest. Serval is SOC 2 Type II, ISO 27001, ISO 42001, HIPAA, and GDPR compliant.
Serval is the AI-native IT service management platform for modern teams. We help organizations resolve employee requests through AI agents that automate help desk responses, workflow execution, access provisioning, onboarding and offboarding, knowledge search, and asset management. Serval is available via cloud-hosted, self-hosted, and hybrid deployment models.
Founded by product and engineering leaders from Verkada, Serval is backed by Sequoia, Redpoint, Meritech, First Round, and General Catalyst, alongside angels including the founders of Verkada and Ramp.
Compliance
SOC 2
ISO 27001:2022
ISO/IEC 42001:2023
HIPAA
GDPR
Resources
View all
Third-Party Assurance
SOC 2 Type II
SOC 2 Type II Bridge Letter-Q4_2026
ISO 27001 Certificate
ISO 42001 Certificate
View 2 more
Policies
Access Control Policy
Asset Management Policy
Business Continuity and Disaster Recovery (BC/DR)
Code of Conduct
View 17 more
Controls
View all
Infrastructure security
Encryption key access restricted
Unique account authentication enforced
Production application access restricted
View 15 more Infrastructure security controls
Organizational security
Portable media encrypted
Anti-malware technology utilized
Confidentiality Agreement acknowledged by contractors
View 2 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 2 more Product security controls
Internal security procedures
Cybersecurity insurance maintained
Configuration management system established
Whistleblower policy established
View 13 more Internal security procedures controls
Subprocessors
View all
Amazon Web Services • cloud hosting/infrastructure
US
Datadog • observability/logging/APM
US
Tailscale • secure network access
US
Temporal Technologies Inc. • workflow orchestration
US
Updates
View all
Privacy
New subprocessor: Vercel Inc. ("Vercel")
Published October 14, 2026
Vercel hosts the Serval web application and related assets, which involves processing access metadata (such as IP addresses and browser information) for users of the application. Vercel also provides AI Gateway, which routes AI requests to Serval's existing AI model providers.
Purpose: Web application hosting and content delivery; AI model routing (Vercel AI Gateway)
Data processed: Access metadata for users of the Serval web application; prompts and model outputs routed to Serval's AI model providers, which may include end-user message content submitted through the platform
Location: United States
Safeguards: Vercel AI Gateway does not retain or log prompt or output content; routing metadata is retained for up to 30 days. Zero data retention and no-training policies are enforced for model providers. SOC 2 Type II, ISO 27001.
Questions For questions or objections, contact privacy@serval.com.
Privacy
New subprocessor: Parallel Web Systems Inc. ("Parallel")
Published September 24, 2026
Serval is adding Parallel Web Systems Inc. ("Parallel") as a subprocessor.
Purpose: Web search and content retrieval that lets Serval's AI agents ground responses in current public web information (for example, vendor status pages and product documentation)
Data processed: Search queries generated by Serval's AI agents, which may include content derived from end-user messages submitted through the Serval platform. Results returned to Serval consist of public web content.
Location: United States
Safeguards: Zero data retention on the Parallel APIs Serval uses (queries and results are not stored after the response is returned, except that content flagged by automated abuse screening may be retained briefly and only as needed to address the flagged issue), no training on customer data, SOC 2 Type II
This update constitutes notice under Section 3.4 of the Serval Data Processing Addendum. The 15-day objection window runs from the date this update is posted, and Parallel will not process customer data before October 8, 2026. Customers whose agreements provide a different notice period will receive direct notice under those terms. Objections or questions can be sent to privacy@serval.com.
Privacy
New subprocessor: TypeSafe AI
Published September 22, 2026
Serval is adding TypeSafe AI, Inc. as a subprocessor.
Purpose: AI model inference for input classification and guardrails in the helpdesk workflow
Data processed: End-user message content submitted through the Serval platform
Location: United States
Safeguards: Zero data retention (inputs and outputs are not stored after the response), no training on customer data, SOC 2 Type II
This update constitutes notice under Section 3.4 of the Serval Data Processing Addendum. The 15-day objection window runs from the date this update is posted, and TypeSafe AI will not process customer data before October 7, 2026. Customers whose agreements provide a different notice period will receive direct notice under those terms. Objections or questions can be sent to privacy@serval.com.
General
Achieving ISO 27001:2022 Certification
Published May 1, 2026
We're pleased to announce that Serval has achieved ISO/IEC 27001:2022 certification, the internationally recognized standard for information security management.
This certification, issued by Advantage Partners (MSCB-389), confirms that Serval has implemented a formal Information Security Management System (ISMS) covering the secure provision of our AI-native IT service management platform, including help desk automation, just-in-time access provisioning, onboarding and offboarding, and AI-powered workflow automation, delivered as a cloud-hosted SaaS service on AWS.
ISO 27001 is not a point-in-time assessment. Maintaining certification requires ongoing internal audits, management reviews, and annual surveillance audits, meaning our security program is subject to continuous independent scrutiny through April 2029.
A copy of our ISO 27001:2022 certificate and Statement of Applicability (SoA) are available upon request via our Trust Center.
Contact trust@serval.com for documentation or security questionnaire support.
Read more about New subprocessor: Parallel Web Systems Inc. ("Parallel")
Privacy and Security at Serval
Serval is a unified help desk, access management, and automation platform with a built-in AI agent workforce. Deploy AI agents to automate the most challenging help desk requests, build enterprise-grade workflow automations, and surface actionable insights.
security@serval.com
Privacy PolicyOpens in new tab
Security and privacy are core to how Serval is built. Our platform is regularly audited by independent third parties, and data is encrypted in transit and at rest. Serval is SOC 2 Type II, ISO 27001, ISO 42001, HIPAA, and GDPR compliant.
Serval is the AI-native IT service management platform for modern teams. We help organizations resolve employee requests through AI agents that automate help desk responses, workflow execution, access provisioning, onboarding and offboarding, knowledge search, and asset management. Serval is available via cloud-hosted, self-hosted, and hybrid deployment models.
Founded by product and engineering leaders from Verkada, Serval is backed by Sequoia, Redpoint, Meritech, First Round, and General Catalyst, alongside angels including the founders of Verkada and Ramp.
Compliance
SOC 2
ISO 27001:2022
ISO/IEC 42001:2023
HIPAA
GDPR
Resources
View all
Third-Party Assurance
SOC 2 Type II
SOC 2 Type II Bridge Letter-Q4_2026
ISO 27001 Certificate
ISO 42001 Certificate
View 2 more
Policies
Access Control Policy
Asset Management Policy
Business Continuity and Disaster Recovery (BC/DR)
Code of Conduct
View 17 more
Controls
View all
Infrastructure security
Encryption key access restricted
Unique account authentication enforced
Production application access restricted
View 15 more Infrastructure security controls
Organizational security
Portable media encrypted
Anti-malware technology utilized
Confidentiality Agreement acknowledged by contractors
View 2 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 2 more Product security controls
Internal security procedures
Cybersecurity insurance maintained
Configuration management system established
Whistleblower policy established
View 13 more Internal security procedures controls
Subprocessors
View all
Amazon Web Services • cloud hosting/infrastructure
US
Datadog • observability/logging/APM
US
Tailscale • secure network access
US
Temporal Technologies Inc. • workflow orchestration
US
Updates
View all
Privacy
New subprocessor: Vercel Inc. ("Vercel")
Published October 14, 2026
Vercel hosts the Serval web application and related assets, which involves processing access metadata (such as IP addresses and browser information) for users of the application. Vercel also provides AI Gateway, which routes AI requests to Serval's existing AI model providers.
Purpose: Web application hosting and content delivery; AI model routing (Vercel AI Gateway)
Data processed: Access metadata for users of the Serval web application; prompts and model outputs routed to Serval's AI model providers, which may include end-user message content submitted through the platform
Location: United States
Safeguards: Vercel AI Gateway does not retain or log prompt or output content; routing metadata is retained for up to 30 days. Zero data retention and no-training policies are enforced for model providers. SOC 2 Type II, ISO 27001.
Questions For questions or objections, contact privacy@serval.com.
Privacy
New subprocessor: Parallel Web Systems Inc. ("Parallel")
Published September 24, 2026
Serval is adding Parallel Web Systems Inc. ("Parallel") as a subprocessor.
Purpose: Web search and content retrieval that lets Serval's AI agents ground responses in current public web information (for example, vendor status pages and product documentation)
Data processed: Search queries generated by Serval's AI agents, which may include content derived from end-user messages submitted through the Serval platform. Results returned to Serval consist of public web content.
Location: United States
Safeguards: Zero data retention on the Parallel APIs Serval uses (queries and results are not stored after the response is returned, except that content flagged by automated abuse screening may be retained briefly and only as needed to address the flagged issue), no training on customer data, SOC 2 Type II
This update constitutes notice under Section 3.4 of the Serval Data Processing Addendum. The 15-day objection window runs from the date this update is posted, and Parallel will not process customer data before October 8, 2026. Customers whose agreements provide a different notice period will receive direct notice under those terms. Objections or questions can be sent to privacy@serval.com.
Privacy
New subprocessor: TypeSafe AI
Published September 22, 2026
Serval is adding TypeSafe AI, Inc. as a subprocessor.
Purpose: AI model inference for input classification and guardrails in the helpdesk workflow
Data processed: End-user message content submitted through the Serval platform
Location: United States
Safeguards: Zero data retention (inputs and outputs are not stored after the response), no training on customer data, SOC 2 Type II
This update constitutes notice under Section 3.4 of the Serval Data Processing Addendum. The 15-day objection window runs from the date this update is posted, and TypeSafe AI will not process customer data before October 7, 2026. Customers whose agreements provide a different notice period will receive direct notice under those terms. Objections or questions can be sent to privacy@serval.com.
General
Achieving ISO 27001:2022 Certification
Published May 1, 2026
We're pleased to announce that Serval has achieved ISO/IEC 27001:2022 certification, the internationally recognized standard for information security management.
This certification, issued by Advantage Partners (MSCB-389), confirms that Serval has implemented a formal Information Security Management System (ISMS) covering the secure provision of our AI-native IT service management platform, including help desk automation, just-in-time access provisioning, onboarding and offboarding, and AI-powered workflow automation, delivered as a cloud-hosted SaaS service on AWS.
ISO 27001 is not a point-in-time assessment. Maintaining certification requires ongoing internal audits, management reviews, and annual surveillance audits, meaning our security program is subject to continuous independent scrutiny through April 2029.
A copy of our ISO 27001:2022 certificate and Statement of Applicability (SoA) are available upon request via our Trust Center.
Contact trust@serval.com for documentation or security questionnaire support.
Read more about New subprocessor: TypeSafe AI
Privacy and Security at Serval
Serval is a unified help desk, access management, and automation platform with a built-in AI agent workforce. Deploy AI agents to automate the most challenging help desk requests, build enterprise-grade workflow automations, and surface actionable insights.
security@serval.com
Privacy PolicyOpens in new tab
Security and privacy are core to how Serval is built. Our platform is regularly audited by independent third parties, and data is encrypted in transit and at rest. Serval is SOC 2 Type II, ISO 27001, ISO 42001, HIPAA, and GDPR compliant.
Serval is the AI-native IT service management platform for modern teams. We help organizations resolve employee requests through AI agents that automate help desk responses, workflow execution, access provisioning, onboarding and offboarding, knowledge search, and asset management. Serval is available via cloud-hosted, self-hosted, and hybrid deployment models.
Founded by product and engineering leaders from Verkada, Serval is backed by Sequoia, Redpoint, Meritech, First Round, and General Catalyst, alongside angels including the founders of Verkada and Ramp.
Compliance
SOC 2
ISO 27001:2022
ISO/IEC 42001:2023
HIPAA
GDPR
Resources
View all
Third-Party Assurance
SOC 2 Type II
SOC 2 Type II Bridge Letter-Q4_2026
ISO 27001 Certificate
ISO 42001 Certificate
View 2 more
Policies
Access Control Policy
Asset Management Policy
Business Continuity and Disaster Recovery (BC/DR)
Code of Conduct
View 17 more
Controls
View all
Infrastructure security
Encryption key access restricted
Unique account authentication enforced
Production application access restricted
View 15 more Infrastructure security controls
Organizational security
Portable media encrypted
Anti-malware technology utilized
Confidentiality Agreement acknowledged by contractors
View 2 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 2 more Product security controls
Internal security procedures
Cybersecurity insurance maintained
Configuration management system established
Whistleblower policy established
View 13 more Internal security procedures controls
Subprocessors
View all
Amazon Web Services • cloud hosting/infrastructure
US
Datadog • observability/logging/APM
US
Tailscale • secure network access
US
Temporal Technologies Inc. • workflow orchestration
US
Updates
View all
Privacy
New subprocessor: Vercel Inc. ("Vercel")
Published October 14, 2026
Vercel hosts the Serval web application and related assets, which involves processing access metadata (such as IP addresses and browser information) for users of the application. Vercel also provides AI Gateway, which routes AI requests to Serval's existing AI model providers.
Purpose: Web application hosting and content delivery; AI model routing (Vercel AI Gateway)
Data processed: Access metadata for users of the Serval web application; prompts and model outputs routed to Serval's AI model providers, which may include end-user message content submitted through the platform
Location: United States
Safeguards: Vercel AI Gateway does not retain or log prompt or output content; routing metadata is retained for up to 30 days. Zero data retention and no-training policies are enforced for model providers. SOC 2 Type II, ISO 27001.
Questions For questions or objections, contact privacy@serval.com.
Privacy
New subprocessor: Parallel Web Systems Inc. ("Parallel")
Published September 24, 2026
Serval is adding Parallel Web Systems Inc. ("Parallel") as a subprocessor.
Purpose: Web search and content retrieval that lets Serval's AI agents ground responses in current public web information (for example, vendor status pages and product documentation)
Data processed: Search queries generated by Serval's AI agents, which may include content derived from end-user messages submitted through the Serval platform. Results returned to Serval consist of public web content.
Location: United States
Safeguards: Zero data retention on the Parallel APIs Serval uses (queries and results are not stored after the response is returned, except that content flagged by automated abuse screening may be retained briefly and only as needed to address the flagged issue), no training on customer data, SOC 2 Type II
This update constitutes notice under Section 3.4 of the Serval Data Processing Addendum. The 15-day objection window runs from the date this update is posted, and Parallel will not process customer data before October 8, 2026. Customers whose agreements provide a different notice period will receive direct notice under those terms. Objections or questions can be sent to privacy@serval.com.
Privacy
New subprocessor: TypeSafe AI
Published September 22, 2026
Serval is adding TypeSafe AI, Inc. as a subprocessor.
Purpose: AI model inference for input classification and guardrails in the helpdesk workflow
Data processed: End-user message content submitted through the Serval platform
Location: United States
Safeguards: Zero data retention (inputs and outputs are not stored after the response), no training on customer data, SOC 2 Type II
This update constitutes notice under Section 3.4 of the Serval Data Processing Addendum. The 15-day objection window runs from the date this update is posted, and TypeSafe AI will not process customer data before October 7, 2026. Customers whose agreements provide a different notice period will receive direct notice under those terms. Objections or questions can be sent to privacy@serval.com.
General
Achieving ISO 27001:2022 Certification
Published May 1, 2026
We're pleased to announce that Serval has achieved ISO/IEC 27001:2022 certification, the internationally recognized standard for information security management.
This certification, issued by Advantage Partners (MSCB-389), confirms that Serval has implemented a formal Information Security Management System (ISMS) covering the secure provision of our AI-native IT service management platform, including help desk automation, just-in-time access provisioning, onboarding and offboarding, and AI-powered workflow automation, delivered as a cloud-hosted SaaS service on AWS.
ISO 27001 is not a point-in-time assessment. Maintaining certification requires ongoing internal audits, management reviews, and annual surveillance audits, meaning our security program is subject to continuous independent scrutiny through April 2029.
A copy of our ISO 27001:2022 certificate and Statement of Applicability (SoA) are available upon request via our Trust Center.
Contact trust@serval.com for documentation or security questionnaire support.