ScyAI Trust Centre
Overview
Secure by design. Certified and audited.
ScyAI protects risk, insurance and financial data under an ISO/IEC 27001:2022-certified information security management system, independently audited against SOC 2. Policies, audit reports and security documentation are available under NDA.
Compliance
ISO/IEC 27001:2022Certified
SOC 2 Type IReport issued
SOC 2 Type IIObservation period in progress
GDPRArticle 28 DPA
NIS2 readinessFor regulated clients
Penetration testingAnnual test completed
Documents
Get accessSecurity controls
Policies
- Security policy overview
- Information security policy
- Incident response plan
Data Security
- Encryption (in transit and at rest)
- Data backups
Access Control
- Access management
Infrastructure
- Status monitoring and audit logging
- Business continuity and disaster recovery testing
Product Security
- Vulnerability scanning
- Penetration testing
- Peer code review
Corporate Security
- Employee security training
- Confidentiality agreements
- Endpoint protection
Legal
- Data Processing Agreement
- Subprocessor list