Trust Center
Trust, verified.
How Chordian protects your data, and the evidence behind it.
Security architecture
- Zero Trust by default: every request authenticated, authorized and logged
- BYOK, ABAC, tenant isolation (0.0 permission-leak rate, contract-tested)
- Sensitive data discovery and answer-time DLP
- Tamper-evident audit trail
- Hardware attestation · dynamic retrieval routing
- Deployment: Chordian Cloud · BYOC · on-prem · air-gapped
Data handling
- Your data never trains any model
- Data residency: EU and US regions, or your own infrastructure
- Retention and deletion on your terms
Compliance
Compliance status
| Item | Status |
|---|---|
| GDPR | Compliant |
| SOC 2 Type II | In progress |
| ISO 27001 | Planned |
| HIPAA | Ready |
| DPA | Available on request |
| Model training on your data | Never |
Documents: Privacy Policy · Terms · DPA · Subprocessors · Security overview (on request via the contact form).
Responsible disclosure
Found a vulnerability? Report it through our secure disclosure form. We respond within 2 business days.
Report a vulnerability