Security & governance
Built to pass your security review
Everything your security, architecture and compliance teams need to evaluate Adeptia, on one page. Controls, AI data handling, deployment responsibilities and documentation.
| Certifications | SOC 2 Type 2 · ISO 27001 (hosted infrastructure) |
|---|---|
| External rating | SecurityScorecard: A |
| Encryption | In transit and at rest |
| Penetration testing | Independently validated |
| AI training on your data | Never |
| AI at runtime | None. Published flows run as deterministic code |
| Deployment | On-premises · Hybrid · Your cloud · Hosted |
| Hosted tenancy | Single-tenant |
01 / Controls
Security controls across the platform
The same controls apply to every workflow, integration and AI action, in every deployment model.
- Identity & access
- Role-based access control · User authentication · Permission management · Access policies
- Data protection
- Encryption in transit and at rest · Secure communications · Controlled access policies
- Secure data exchange
- Governed exchange with customers, partners and suppliers over APIs, EDI, SFTP and files
- Data governance
- Data lineage · Validation · Business rule enforcement · Exception management · Workflow traceability
- Audit logging
- User activity · Workflow actions · Operational events · Every AI action logged
- Monitoring
- Real-time monitoring · Alerting · Exception visibility · Operational dashboards
02 / AI data handling
What happens to your data when AI is involved
The questions your AI governance committee will ask, answered plainly.
Is our data used to train models?
Never.
Customer data never trains external models.
Does AI run in production?
No.
AI works at design time. Published flows run as deterministic code.
Whose model?
Yours.
Anthropic, OpenAI, Azure OpenAI or AWS Bedrock, on your account and key.
Where’s the knowledge base?
Isolated.
One instance per customer, self-hostable.
Is AI activity logged?
Every action.
Encrypted and audit-logged.
Who approves AI output?
Your people.
Human-in-the-loop approvals and escalation paths.
Four deployment models. One platform. Clear ownership.
| Where it runs | On-premises | Hybrid | Your cloud | Hosted by Adeptia |
|---|---|---|---|---|
| 03 / Deployment & responsibilities | ||||
| Infrastructure owner | Your data center | Your private cloud, connected to on-prem systems | Your AWS, Google Cloud or Azure account | Adeptia-managed, single-tenant |
| Monitoring & updates | You | You | You | Adeptia |
| Infrastructure certifications | Your environment | Your environment | Your cloud provider | SOC 2 Type 2 · ISO 27001 |
| Redundancy & SLA | Your design | Your design | Your design | Geographic redundancy, SLA-backed |
| Best for | Strict residency and network control | Modernizing legacy while keeping governance | Cloud-standardized IT teams | Less IT overhead |
04 / Compliance & audit
Audit evidence, captured as the work happens
Workflow history, exceptions and approvals are recorded automatically, so audits pull from the system instead of spreadsheets.
- Audit logs and full workflow history
- Exception tracking with resolution trail
- Policy and business rule enforcement
- Process documentation and compliance reporting
05 / Documentation
Everything for your review, in one place
Certifications, policies, system status and security questionnaire responses are in the Adeptia Trust Center.
Security FAQ
What certifications does Adeptia hold?
Hosted deployments run on SOC 2 Type 2 and ISO 27001 certified infrastructure. Reports are available through the Trust Center.
Is our data used to train AI models?
No. Customer data is never used to train external models, and every AI action is encrypted and audit-logged.
How is AI governed?
AI works at design time with human approval. Published workflows run as deterministic code, with observability and audit trails on every AI action.
Can Adeptia run in our own environment?
Yes. On-premises, hybrid, or in your own AWS, Google Cloud or Azure account. Hosted is also available.
How does Adeptia support audit readiness?
Audit logs, workflow history, exception tracking and process documentation are captured automatically.
Bring your security team. We’ll bring the answers.
Walk through controls, architecture and AI governance with our security and solutions architects.