Trust. Security. Compliance
RegASK keeps your data safe with rigorous controls, continuous monitoring, and proven compliance frameworks aligned to global standards.
View our Trust Center Contact Security Teamstandards
Our certifications are not decorative. Each is maintained continuously, audited by independent third parties, and renewed against the most current revisions.
Privacy Information Management System (PIMS)
ISO 27701
Artificial Intelligence Management System (AIMS)
ISO 42001
Information Security Management
ISO 27001
Protection of PII in Public Clouds
ISO 27018
Security, Availability & Confidentiality
SOC 2 TYPE II
General Data Protection Regulation Compliance
GDPR
Sustainability ratings for companies
EcoVadis
Encryption everywhere
Data encrypted in transit (TLS) and at rest (AES‑256). Secrets centrally managed and rotated.
Least-privilege access
RBAC, SSO, and scoped API keys. Admin actions are logged and reviewed.
Hardened infrastructure
Network segmentation, WAF, managed Kubernetes, and regular patching.
Compliance by design
Backed by certified ISMS and AI management processes. Continuous controls monitoring.
Resilience and continuity
Daily backups and tested disaster recovery playbooks.
Secure development
Static/dynamic testing, peer reviews, and dependency scanning in CI.
SSO
SAML/OIDC SSO for centralized authentication
SCIM provisioning
Automated user lifecycle with SCIM for quick onboarding and off-boarding
Audit logging
Comprehensive admin and data access logs with immutable trails
Encryption management
TLS 1.2+ in transit, AES‑256 at rest, managed keys with rotation
Network protection
WAF, DDoS protection, rate limiting and network segmentation
Vulnerability management
Continuous scanning and regular 3rd‑party penetration tests
Ownership
You retain full ownership of your data at all times. We process it on your behalf – and only as you direct.
Retention
Configurable retention windows, governed by your policies. Verifiable deletion on request.
AI use
Only approved model providers, governed by ISO/IEC 42001. Your data is never used to train or fine-tune any AI model.
Residency
Transparent sub-processor inventory and regional hosting options aligned to your jurisdiction.
CONTROLS
Sample of our comprehensive security framework – full documentation available on demand
Product security
Data security
Network security
App security
Corporate security
Certifications listed reflect RegASK’s advanced security posture and may be subject to validation under NDA upon request. For current policies, controls, and documents, contact us to gain access to our comprehensive Trust Center.
Trust Center
Our Trust Center contains current audit reports, control evidence, sub-processor disclosures, and policy documentation. We share it with prospects and customers under NDA – typically within one business day of request.
RegASK governs its AI features under a formal AI management framework, certified to ISO/IEC 42001:2023. Model usage is continuously monitored and restricted to approved providers, every model is backed by documented risk assessments, and human-in-the-loop controls keep regulatory experts in the decision path — so AI outputs stay accountable and audit-ready. Learn more on our Security page.
RegASK encrypts data both in transit and at rest. Data in transit is protected with TLS 1.2 or higher, and data at rest is encrypted using AES-256, with managed encryption keys and regular key rotation. Encryption sits within RegASK’s broader security program — role-based access controls, certified infrastructure (ISO/IEC 27001:2022 and SOC 2 Type II) and Microsoft Azure hosting. For the full security and privacy posture, see our Security page.
