Security
Enterprise security. By default.
Handing a brief to AI should never be a risk. Here's what makes it safe.
End-to-end encryption
TLS 1.3 in transit, AES-256 at rest. Keys managed via KMS.
EU hosting
All data resides in the European Union (Paris, Frankfurt).
Compliance
SOC2 Type II in progress, GDPR-native, self-serve DPA.
Tenant isolation
Strict per-tenant isolation. No cross-tenant model training.
Audit logs
Immutable trace of every agent action, SIEM-exportable.
SSO & roles
SAML 2.0, SCIM, enforced MFA, fine-grained RBAC.
Security questions, DPA requests, pentest reports: security@javelot.io