Zencheck.ai

Zencheck.ai recognises that the confidentiality, integrity and availability of information and data created, maintained and hosted by us are vital to the success of the business and privacy of our partners.

As a service provider/product, we understand the importance in providing clear information about our security practices, tools, resources and responsibilities within Zencheck.ai so that our customers can feel confident in choosing us as a trusted provider.

This security posture highlights high-level details about our steps to identify and mitigate risks, implement best practices, and continuously develop ways to improve.

Compliances (3)

ISO 27001

Compliant

SOC 2

In progress

GDPR

In progress

Controls

Continuously monitored

Data security (3)

Encrypting Data At Rest

Testing for Reliability and Integrity

Transfer of PII

Network security (4)

External System Connections

Transmission Confidentiality

Anomalous Behavior

App security (2)

Conspicuous Link To Privacy Notice

Approval of Changes

Endpoint security (5)

Malicious Code Protection (Anti-Malware)

Full Device or Container-based Encryption

Endpoint Security Validation

Corporate security (32)

Code of Business Conduct

Organizational Structure

Roles & Responsibilities

Subprocessors (7)

AWS

United Kingdom

IT infrastructure

Microsoft Azure

United Kingdom

IT infrastructure

Google Workspace

United Kingdom

IAM providers

PostHog

United Kingdom

Analytics

Stripe

United Kingdom

Finance

FAQ (6)

All the data uploaded on our server stays within the EU. The LLMs used are also located in the EU region.

We do not train the LLMs with customer data. They are only used for verification of documents.

Our company enforces strong role based access controls within our organisation and we follow the principle of least privilege.

The client's information that is within the documents uploaded to our server are stored in our AWS infrastructure with all the other document information uploaded. This information is then passed into LLMs for verification. The resulting output of that data is stored within its respective tenant's account with metadata for quick access by the customer. The data is encrypted and only accessible by them. Throughout the entire process, the data remains within the EU. The LLMs do not train on the customer's data and are all located within the EU region.

Yes, as offered by our service providers, including AWS and Azure. All our data is encrypted at rest using AES-256 (Advanced Encryption Standard with 256-bit keys). Additionally, data in transit is secured using Transport Layer Security (TLS) over HTTPS.

As our service is hosted on the cloud, we do not maintain any workstations, servers or network equipment. The external servers and network equipment we use are located in the EU.

Building trust, made easy by

Create your own Trust Center