Snapshot 90459
Normalized text
Scripts and page chrome removed; this is what change detection compares.
🔐 Data Encryption All data is encrypted at rest and in transit using industry-standard encryption protocols. ✓ Encryption at Rest AES-256 encryption for all stored data, including databases, backups, and file storage. ✓ Encryption in Transit TLS 1.3 for all data transmission. HTTPS enforced across all endpoints. ✓ Key Management AWS KMS for encryption key management with automatic key rotation. ✓ Secure APIs API keys with HMAC signatures. OAuth 2.0 and JWT for authentication. 🏢 Infrastructure Security Our infrastructure is hosted on AWS with enterprise-grade security controls. ✓ AWS Infrastructure Hosted on AWS with SOC 1, SOC 2, and SOC 3 certifications. Multi-AZ deployment. ✓ Network Security VPC isolation, security groups, WAF protection, and DDoS mitigation. ✓ Monitoring 24/7 security monitoring, intrusion detection, and automated alerting. ✓ Redundancy Geographic redundancy, automatic failover, and 99.9% uptime SLA. 🔑 Access Control Strict access controls protect your data and your customers' information. ✓ Role-Based Access Granular RBAC with Admin, Agent, and Viewer roles. Custom permissions available. ✓ Multi-Factor Auth MFA support via authenticator apps, SMS, or hardware keys (Enterprise). ✓ SSO Integration SAML 2.0, OAuth, and Auth1 integration for enterprise single sign-on. ✓ Audit Logging Comprehensive audit trails for all user actions. Exportable logs. 🏛️ Compliance Chat101 meets the compliance requirements for regulated industries. Standard Status Description SOC 2 Type II ✓ Certified Annual audit of security, availability, and confidentiality controls GDPR ✓ Compliant Full compliance with EU data protection regulations HIPAA ✓ Ready BAA available for healthcare customers handling PHI CCPA ✓ Compliant California Consumer Privacy Act compliance PCI DSS ✓ Compliant Payment card data handled by PCI-compliant processors Request Security Documentation Need our SOC 2 report, security questionnaire, or DPA? We're happy to provide documentation for your security review. Request Documentation → 🛡️ Data Protection Your data is protected with multiple layers of security and isolation. ✓ Tenant Isolation Complete data isolation between tenants. Separate databases and AI models. ✓ Data Residency Choose your data region: US, EU, or other available regions (Enterprise). ✓ Backup & Recovery Automated daily backups with 30-day retention. Point-in-time recovery. ✓ Data Deletion Complete data deletion within 30 days of account closure. Certificates available. 🔍 Security Practices Our team follows security best practices to keep your data safe. ✓ Penetration Testing Annual third-party penetration testing and quarterly vulnerability scans. ✓ Secure Development OWASP guidelines, code reviews, and automated security scanning in CI/CD. ✓ Employee Training Annual security training for all employees. Background checks for data access. ✓ Incident Response Documented incident response plan. 72-hour breach notification commitment. 🐛 Vulnerability Disclosure We take security vulnerabilities seriously and appreciate responsible disclosure. If you discover a security vulnerability in Chat101, please report it to us at security@chat101.ai. We commit to: Acknowledge receipt within 24 hours Provide a timeline for remediation Keep you informed of our progress Credit you in our security acknowledgments (if desired) Please do not publicly disclose vulnerabilities until we've had a chance to address them.