ISO 27001:2022
Certified Information Security Management System (ISMS). Annual independent audits keep the certification current.
Security you can verify, not just trust.
cloudsquid is ISO 27001:2022 certified and GDPR ready. Documents stay encrypted, never train AI models, and can stay in your region. Every claim on this page is documented in the Trust Center.
- Certification
- ISO 27001:2022
- Data protection
- GDPR
- Model training
- Never on your data
- Encryption
- TLS 1.3 · AES-256
- Residency
- EU, US or your region
01 Compliance
Certified and continuously monitored.
01
02
GDPR
Full compliance with the EU General Data Protection Regulation. A Data Processing Agreement (DPA) is available for every enterprise customer.
02 Your data
Your documents stay yours.
01
No model training
Your documents and data are never used to train AI models. What you process stays confidential.
02
Zero retention mode
Documents are processed and immediately deleted after extraction, leaving complete audit trails without stored content. Available on Enterprise plans.
03
End-to-end encryption
TLS 1.3 in transit and AES-256 at rest, with automated key rotation protecting your data at every stage.
04
Data residency options
Host data in the EU, US, or other regions to meet local compliance requirements. No cross-border transfers without your explicit consent.
03 Infrastructure
Built on hardened infrastructure.
01
Enterprise cloud infrastructure
99.9% uptime SLA, multi-region redundancy, and automatic failover.
02
Multi-layered network security
WAF protection, intrusion detection and prevention (IDS/IPS), and complete network isolation between customer environments.
03
Granular access controls
Role-based access control (RBAC), multi-factor authentication (MFA), and SSO with your enterprise IdP (SAML/OAuth).
04 Operations
Monitored around the clock.
01
24/7 security operations
Continuous SOC monitoring, real-time threat detection, automated incident response, and regular penetration tests by third-party security firms.
02
Incident response plan
Documented procedures with 15-minute acknowledgment time, regular response exercises, and transparent customer communication.
05 Documentation
Every claim, documented.
Compliance certificates, security policies, and technical measures are available for review in the Trust Center.
01
Security whitepaper
02
Subprocessor list
03
Data Processing Agreement (DPA)
04
Technical and organizational measures
05
Compliance certificates
06
Penetration test summaries
06 Updates
