Skip to content
Security

Your clients’ data, where you decide

Statements hold the most private numbers a client has. Choose where AI-Mond runs and where the data lives, decide who sees what, and keep a record of everything that happens to it.

  • ISO/IEC27001Aligned
  • Type ISOC 2In progress
  • EU dataGDPRCompliant
  • India · 2023DPDPBuilt for
Deployment

Three places it can run

Pick the one your clients, your regulator and your IT team are comfortable with.

  • AI‑Mond cloudWe run it for you, in the region you choose.
    • We run and look after it
    • Data stays in the region you choose
    • Nothing to install
  • Your VPCIt runs inside your own cloud account, so the data never leaves it.
    • Runs inside your own cloud account
    • Documents never leave that account
    • Your network rules apply
  • On-premiseIt runs on your own servers, for teams that can’t use the cloud.
    • Runs on your own servers
    • For teams that can’t use the cloud
    • Your network rules apply
Access

Who sees what, and a record of it

  • Single sign-onSign in through your company’s identity provider.
  • User access and rolesDecide who can view, edit and export a case.
  • Audit logsEvery sign-in, edit and export is recorded.
  • Sensitive fieldsIdentifiers such as PAN are masked. Showing one in full is logged.
Compliance

What we claim, exactly

Your firm reads claims like these for a living, so each one says only what’s true today. The seals are our own design, not the standards’ marks.

  • ISO/IEC27001AlignedSecurity controls aligned with ISO/IEC 27001Our controls follow the standard. Certification comes from an accredited auditor; until that audit, we say aligned, not certified.
  • Type ISOC 2In progressSOC 2 Type I audit in progressAn independent auditor is assessing our controls. When the report is issued, this line changes.
  • EU dataGDPRCompliantGDPR compliantFor clients and data subjects in the EU and UK. There is no official GDPR certificate, so there is no logo.
  • India · 2023DPDPBuilt forBuilt for India’s DPDP Act, 2023The Act has no certification scheme. AI-Mond is built to help firms meet their duties under it.
FAQ

Questions from IT and risk

What reviewers ask before a firm signs up. Send us your own questionnaire too.

Something we didn’t cover?Book a demo and ask us directly.
01Where is our data stored?

In AI-Mond’s cloud, it stays in the region you choose. Run it in your own cloud account or on your own servers and it stays there.

02Can we run AI-Mond ourselves?

Yes. It can run inside your own cloud account (your VPC) or on-premise on your own servers, as well as in AI-Mond’s cloud.

03How do people sign in?

Through your company’s identity provider, with single sign-on.

04Who can see a case?

Whoever you give access to. Roles decide who can view, edit and export each case.

05What gets logged?

Every sign-in, edit and export, with who did it and when. Showing a sensitive field such as a PAN in full is logged too.

06Are you ISO 27001 or SOC 2 certified?

Not yet, and we don’t claim to be. Our controls are aligned with ISO/IEC 27001, and our SOC 2 Type I audit is in progress.