SOC 2 in progress
Independent SOC 2 audit in progress. ISO 27001 certified today.
Enterprise Security & Compliance — ISO 27001, GDPR, SOC 2 in progress
isLucid meets the strictest security requirements. ISO 27001 certified, GDPR compliant, SOC 2 in progress. On-premise option for total data control.
ISO 27001 Certified
How It Works
Step 1: Security assessment
Our team works with yours to assess security requirements and compliance needs.
Step 2: Architecture review
Choose cloud or on-premise deployment. Review data flow, encryption, and access controls.
Step 3: Compliance documentation
Receive our ISO 27001 certificate, DPA, and custom security questionnaire responses.
Step 4: Secure deployment
Deploy with your security team's approval. Ongoing monitoring and annual assessments.
Benefits
ISO 27001 Certified
International standard for information security management. Certified by accredited auditors.
GDPR compliant
Full compliance with EU GDPR. Data processing agreements, right to deletion, and data portability.
Technical Specifications
- AES-256 encryption at rest
- TLS 1.3 in transit
- Role-based access control (RBAC)
- Audit logging with 7-year retention
- PII redaction in transcripts (configurable)
- Data residency options (EU, US, custom)
- ISO 27001 certificate available on request
Frequently Asked Questions
Where is my data stored?
Cloud deployment data is stored in secure data centers. You choose your data region (US, EU, or custom). For complete control, our on-premise Agent Box keeps all data within your data center. We never share or sell customer data.
Can I get a SOC 2 report?
Our SOC 2 audit is in progress. Our ISO 27001 certificate is available today — contact [email protected] or your sales representative.
How does isLucid handle PII?
PII can be automatically redacted from transcripts and logs (configurable per your requirements). Access to PII is controlled via RBAC. All PII is encrypted at rest (AES-256) and in transit (TLS 1.3). Data retention periods are configurable.
What about GDPR right to deletion?
isLucid fully supports GDPR data subject rights including right to access, rectification, deletion, and data portability. Deletion requests are processed within 30 days. Our DPA (Data Processing Agreement) is available for all EU customers.