Our approach
ActBI is built to clear enterprise procurement: security is designed in, not bolted on. This overview summarizes the controls relevant to this website and our early-access program.
Infrastructure
The site is served over TLS from hardened, managed infrastructure with automatic patching. Production deployments support dedicated VPCs and regional data residency (US, EU, UK, APJ) for platform customers.
Data protection
Data is encrypted in transit (TLS 1.2+) and at rest. Customer-managed encryption keys (CMEK) are available on dedicated deployments. Access follows least-privilege with SSO, role-based access, and full audit trails on the platform.
Compliance roadmap
SOC 2 Type II is targeted for Q3 2026; HIPAA and ISO 27001 programs are in progress; the platform is designed for GDPR and CCPA compliance and EU AI Act readiness.
Reporting a vulnerability
If you believe you have found a security issue, contact security@actbi.ai. We acknowledge reports promptly, do not pursue good-faith research, and credit reporters where desired.
Draft for review — this document is a template and not legal advice. Have it reviewed by counsel before production use.