Security & Compliance
Built for the most regulated rooms — enterprise controls for banks, insurers, health systems, telcos, and public-sector deployments.
Certifications & frameworks
- SOC 2 Type II — certified
- ISO 27001 — certified
- ISO 27701 — aligned
- HIPAA — aligned; BAA available
- GDPR and India DPDP — aligned
- PCI-DSS — certified
Security controls
- Data residency pinned to AWS, GCP, or Azure regions — EU, US, IN, AE, BR, SG, AU
- AES-256 at rest and TLS 1.3 in transit; bring-your-own KMS keys per tenant
- PII redaction inline on every channel — pre-LLM and pre-storage
- Signed, immutable audit logs for tool calls, model inference, and agent decisions
- Multi-tenant SaaS, single-tenant VPC, or fully on-prem with air-gapped builds
- Model isolation — your traffic never trains shared models
- SAML, OIDC, SCIM; per-tool scopes and step-up auth for sensitive actions
Procurement & trust documentation
SOC 2 reports, DPAs, BAAs, sub-processor disclosures, and penetration-test summaries are available under NDA for qualified prospects and partners.
Contact vidya@repliantai.com to start a security review.