Snapshot 253792
Normalized text
Scripts and page chrome removed; this is what change detection compares.
New Announcing AISIX: The AI-Native AI Gateway for LLMs and AI AgentsLearn More Learn More Trust Center API7.ai Trust Center We are committed to providing an open, secure, efficient, and reliable API management platform for global customers. We prioritize security and continuously maintain compliance in our products and services to ensure that our customers can use them with confidence. Contact API7 Experts At API7.ai, we place a high value on security and compliance, as we understand that we handle our customers' most valuable assets — APIs and data. We offer enterprise-grade privacy and security protections, which are not only reflected in our products but also in our ongoing process improvements. Additionally, we undergo third-party audits to ensure that our products and services meet your compliance requirements. Compliance SOC2 Type II ISO/IEC 27001:2022 HIPAA GDPR Resources Certificates ISO/IEC 27001:2022 Certificate Policies Privacy Policy Terms of Service API7 Cloud User Agreement API7 Cloud Data Processing Addendum Technical Support Policy Vulnerability Disclosure Policy Reports SOC 2 Type II Report Penetration Test Report Documents HIPAA Compliance Documentation Security Hardening Reference Security and Compliance Overview AI Gateway Guide (White Paper) Enterprise Whitepaper SOC 2 Type I Compliance Announcement Subprocessors Amazon Web Services Cloud Infrastructure · US, EU Google Cloud Platform Cloud Infrastructure · US Cloudflare CDN & WAF · Global Stripe Payment Processing · US FAQ API7.ai holds SOC 2 Type II, ISO/IEC 27001:2022, HIPAA, and GDPR compliance certifications. Our SOC 2 report is available under NDA — click the "Request Access" button in the Resources tab to submit a request. Our security team will review and provide the report to your business email. API7.ai employs multiple layers of security including TLS encryption for data in transit, AES-256 encryption for data at rest, role-based access control (RBAC) for dashboard and API traffic, mutual TLS (mTLS) for service-to-service communication, Web Application Firewall (WAF), audit logging with sensitive field masking, and continuous security monitoring. All credentials, SSL certificates, and plugin configurations are encrypted before storage. API7.ai uses AES-256 encryption for data at rest and TLS 1.2+ for data in transit. User credentials are salted and encrypted using PBKDF2 before storage. SSL certificates and sensitive plugin configuration fields are also encrypted. Audit logs mask sensitive information to prevent accidental exposure. Ready to manage your APIs? Start For Free Contact Us