Trust & Safety

Security at Claustor

8-layer defence architecture built for enterprise contract intelligence.

🔐
Encryption at Rest
AES-256 for all stored data. Keys managed via Google Cloud KMS.
🔒
Encryption in Transit
TLS 1.3 on all connections. HSTS enforced on all domains.
👥
Role-Based Access
Granular RBAC: Admin, Manager, Viewer roles per organisation.
🏢
Org Isolation
Separate Pinecone namespaces and DB filtering per organisation.
📋
Audit Logs
Full activity trail for all data access and admin actions. Enterprise plan.
🌏
Regional Deployment
Data in asia-south1 (Mumbai, India). Custom regions for Enterprise.
🤖
Private AI Option
Enterprise: isolated AI processing. Data never trains AI models.
⚡
Rate Limiting
Redis-backed rate limiting. Brute force protection on all auth endpoints.

Compliance & Certifications

✓
SOC 2 Ready
Architecture designed for SOC 2 Type II audit. Pursuing certification post-launch.
✓
GDPR Aligned
Data processing agreements with all providers. Right to deletion, export, and correction.
✓
ISO 27001 Aligned
Information security management practices aligned with ISO 27001 framework.
✓
PDPA (India)
Compliant with India Personal Data Protection Act requirements.

Report a Security Issue

We take security seriously and respond within 24 hours.

security@claustor.com →