Security & Compliance
How VeldrixAI protects your data and supports your compliance program.
Data handling
- No raw PII in logs. The audit trail stores detection metadata, not the sensitive content itself.
- Encryption. Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
- Minimal retention. You can run with
include_prompt=falseso prompts are never transmitted.
Audit integrity
The audit trail is append-only and hash-chained per tenant, with a database-level trigger that rejects updates and deletes. Integrity is independently verifiable, which is what makes VeldrixAI logs admissible as compliance evidence.
Tenant isolation
Every organization's data — keys, policies, audit chains — is isolated. Audit chains are keyed per tenant so one customer's records can never be read or interleaved with another's.
Frameworks
SOC 2 Type II
Controls aligned to the Trust Services Criteria.
GDPR / CCPA
Data-minimization and subject-rights support.
HIPAA
PHI detection plus BAA availability on Enterprise.
EU AI Act
Evidence for risk management and human-oversight obligations.
Deployment options
VeldrixAI runs as a managed cloud service by default. Enterprise customers can deploy in their own VPC or fully on-prem so that no evaluated content ever leaves their network.