Data protection by design
We prioritize responsible data handling throughout the platform. The Privacy Policy and applicable agreements describe the terms governing customer data.
Trust Center
Trust is built into everything we do.
Everything your security and procurement teams need, in one place.
Our security commitments
Our approach to protecting what matters.
Security is a continuous commitment, with capabilities evolving across the platform.
Encryption and secure transport
Encryption and transport security are part of our security architecture. Specific algorithms, coverage and deployment configurations can be discussed during security review.
Access and separation
We design for appropriate access boundaries between users, workspaces and sensitive operations. Available controls depend on the product and configuration.
Visibility and accountability
Logging, review and traceability are important parts of our platform direction. Ask our team which audit capabilities are currently supported for your use case.
Human oversight
Syntic is designed to keep people involved in consequential decisions. Review and approval capabilities vary by workflow and product.
Security collaboration
We welcome responsible security reports and enterprise security questions through our dedicated contact channels.
Compliance and certifications
Building toward independent assurance.
Planned certifications and attestations
SOC 2 Type I
Planned. Syntic does not currently hold a SOC 2 Type I report.
SOC 2 Type II
Planned. Syntic does not currently hold a SOC 2 Type II report.
ISO 27001
Planned. Syntic is not currently ISO 27001 certified.
Data handling
For information about data collection, use and retention, review our Privacy Policy and contact our team about applicable data processing terms.
Infrastructure security
Security for a platform built to scale.
Cloud architecture
Syntic uses cloud infrastructure to deliver its platform. Architecture, hosting and deployment requirements can be discussed with our team.
Network protection
Our security program addresses secure communication, exposure reduction and protection of internet-facing services. Specific controls are reviewed as the platform evolves.
Privileged access
Limiting sensitive access is a security priority. We review privileged operations, authentication and permissions as part of our security development.
Monitoring and response
We are developing operational monitoring, vulnerability management and incident-response practices appropriate to a growing AI platform.
Incident management
Our approach prioritizes investigation, containment and communication. Notification obligations depend on applicable law and contractual terms.
Resilience and recovery
Reliability, backups and recovery planning are ongoing engineering priorities. Service-specific commitments require separate confirmation.
AI-specific safety and controls
Responsible AI requires deliberate safeguards.
Responsible model use
We aim to make data use transparent and to provide clear choices for customers. Model-specific processing and training terms must be confirmed in the applicable agreements.
Output review
AI output can be incorrect or inappropriate. We encourage review, testing and safeguards suited to the sensitivity of each workflow.
Approval and authorization
High-impact actions should be subject to explicit authorization and appropriate human review. Confirm the available controls for each product before production use.
Human escalation
We design AI experiences with human supervision in mind. Escalation and takeover options depend on the specific channel and integration.
Responsible voice deployment
Voice deployments should account for consent, disclosure, recording and applicable communications laws. Customers remain responsible for configuring lawful use.
Change management
Version control, testing and rollback are important engineering priorities. Availability varies by feature and deployment.
Least-privilege access
Credentials and integrations should receive only the permissions needed for a task. Review supported access restrictions with our team.
Subprocessors
The third parties we use to deliver Syntic.
Syntic works with service providers to deliver its platform. Contact our team for information about relevant subprocessors and applicable contractual terms.
View full subprocessor listFor customers and procurement teams
Security conversations, grounded in evidence.
Standard documentation
- Public privacy policy and applicable terms
- Security and data-handling questions through our team
- Information about relevant subprocessors on request
Under NDA
- Architecture and data-flow information, subject to availability
- Security documentation, where prepared and appropriate to share
- Additional technical discussions for qualified reviews
On Business and Enterprise
- Discuss customer-specific security requirements
- Review procurement questionnaires and contractual requests
- Scope regulated workloads before production deployment
Responsible disclosure
Security researchers can review our disclosure information at syntic.ai/legal/security-disclosure.
Trust and AI
How we think about responsible AI at the scale of an AI workforce platform.
- 01
Trust starts with transparency.
We distinguish the protections we provide today from capabilities still being developed. We will not present planned certifications as completed assessments.
- 02
Customer data deserves respect.
We aim to handle customer information responsibly, with clear policies, appropriate safeguards and defined contractual obligations.
- 03
People remain accountable.
AI can help teams act faster, but human judgment, review and oversight remain essential for important decisions.
- 04
Security is continuous work.
We are investing in secure engineering, operational resilience and a maturing compliance program as Syntic grows.
- 05
Independent assurance is a goal.
SOC 2 Type I, SOC 2 Type II and ISO 27001 are planned milestones. None is currently completed or certified.
Status and history
Service status information, where available: status.syntic.ai
Get in touch
Reach the team that owns trust at Syntic.
- Security and compliance
- security@syntic.ai. For procurement diligence, compliance scoping, security questionnaires, and DPA requests.
- Privacy and data rights
- privacy@syntic.ai. For data subject access requests, deletion requests, and privacy framework questions.
- Vulnerability reports
- security@syntic.ai. Send vulnerability reports to our security team.
- Service status and incidents
- status.syntic.ai. Service status information, where available.
- Security pack request
- Use the button below to discuss available documentation and review requirements.