Our hosting, auth, database, and AI partners run on SOC 2 Type II and HIPAA-capable infrastructure. NeuraWrite's own organization-level SOC 2 program is in progress, we separate partner certifications from our roadmap and are transparent about both.
Our hosting, database, auth, and AI providers all hold SOC 2 Type II and HIPAA certification. Your data lives on independently audited infrastructure.
We're a growing company actively working toward SOC 2 Type I (target Q4 2026). We're being transparent about where we are. Full details in FAQ.
No black boxes. Here's exactly where your content goes from the moment you write it.
We selected partners specifically because they hold SOC 2 Type II and HIPAA certification, not as an afterthought.
Where we are today and where we're heading, with honest timelines.
Built on SOC 2 Type II certified multi-cloud partners from day one: hosting, auth, database, and AI layers are all independently audited.
Privacy policy, cookie banner, and email intake for privacy requests. There is no in-product request queue.
Written security policies, access control procedures, and incident response plan documented.
Actively working toward our first SOC 2 Type I report (security, availability, confidentiality) with a certified auditor. Target: Q4 2026.
SOC 2 Type II continuous audit, plus HIPAA alignment and HITRUST for healthcare and regulated industries. Target 2027.
These measures are active regardless of our certification status.
We use a leading enterprise AI provider. Your content does not improve our models unless you turn that on. The setting is off by default.
Honest answers. No marketing fluff.
We're happy to answer security questions, complete vendor questionnaires, or discuss DPA options for business accounts.
Last reviewed March 2026 · Report a vulnerability