We put data security first.
Trust matters most to us. Adopt AI was designed to be secure and compliant from the start, so your team can use AI agents with confidence.
Our Commitment to Your Security
Security and compliance are built into Adopt AI from the beginning. We protect your data and adhere to top industry standards, so your team can use AI agents without sacrificing security, privacy, or control.
Compliance
We rely on independent audits rather than self-declarations alone. Our certifications cover every deployment model.
SOC 2 Type II
We are audited across all five trust services criteria: confidentiality, integrity, availability, security, and privacy.
ISO/IEC 27001
Our information security management system is certified and independently assessed.
GDPR and CCPA
We support regional deployment and data localization where required.
AI
You control how the model layer operates. We do not hold your keys or data.
Bring your own key
You maintain your relationship with your LLM provider. We do not store or manage your API keys.
Facilitated access
We facilitate provider access and credentials, but for hybrid and on-premises deployments, inference flows directly from your environment to the provider.
No training, ever
No return, financial statement, or record is used to train a model - ours or our providers
Access Control
Access controls ensure that partners, reviewers, and preparers only see information relevant to their roles.
Role-based permissions
Your firm defines what each role can view, edit, and approve.
SSO and MFA
Single sign-on and multi-factor authentication supported for every account.
Support access is opt-in
Our team can access your data only with your explicit approval each time.
Data Handling
Adopt AI functions as an execution layer rather than a data warehouse. By design, we minimize our interaction with your data.
Encrypted everywhere
We use TLS 1.2 or higher for data in transit and AES-256 encryption for data at rest.
Logically isolated
Your data remains segregated from all other accounts on the platform.
Deployed where you need it
We offer cloud-hosted solutions for speed, hybrid options for data residency, and fully on-premises deployments, including air-gapped, Kubernetes-based environments.
Zero data retention
Files ingested for processing are deleted once the workflow is complete.
Logging and Monitoring
If an agent interacts with a file, a detailed record is created, including the actions taken and the individual who approved them.
Full audit trail
All agent actions are logged, specifying what was executed, when, on which file, and who approved the action.
Sensitive data redacted
Passwords, API keys, and other sensitive data are automatically stripped from logs.
Exportable
Retention and export are aligned with your deployment model.
Security
We apply standard enterprise security controls consistently, rather than as an afterthought.
Cloud infrastructure security
Our cloud provider supplies firewalls, intrusion detection, and physical safeguards.
Network segmentation
We isolate different parts of our infrastructure to enhance security.
Tested
We conduct regular vulnerability scans, perform independent penetration testing, and maintain a documented incident response plan.
FAQs
