Your data, in safe hands.

AES-256 at rest, TLS 1.2+ in transit, per-tenant encryption keys in AWS KMS. Optional customer-managed keys (BYOK) on Enterprise. Quarterly third-party penetration tests with summaries available under NDA.

Engineers do not have routine access to client data. Production access is explicit, time-bounded, logged in an immutable audit trail, and reviewed weekly. SSO + SCIM enforced on Growth and Enterprise plans, with role-based permissions and customer-configurable retention.

Plain-English Data Processing Agreement and privacy policy, reviewed quarterly. Material changes are notified to enterprise customers 30 days in advance with the right to object. Standard MNDA turnaround typically under 24 hours.

Granular consent surfaces inside the product. Account managers and clients can review what data Kaizan holds about a relationship and request deletion at any time. Per-meeting opt-outs supported via calendar invite tags.

Every model in production is risk-rated, version-controlled and monitored. New models go through pre-launch evaluations covering accuracy, bias, refusal behaviour and prompt-injection resistance. Audit logs of model decisions are retained per your retention policy.

Kaizan does not aggregate client data to train shared or foundation models. Per-tenant fine-tuning, when explicitly enabled, stays scoped to that tenant and is deleted on contract end. Zero-retention API contracts with OpenAI and Anthropic.