All of our infrastructure partners are SOC 2 Type II and HIPAA certified. We’re working toward our own SOC 2.
All of our partners (hosting, identity, database, AI) are SOC 2 Type II and HIPAA certified. NeuraWrite itself is not yet certified; we’re working toward it. Details in the FAQ.
Where we are today and where we are heading — with honest timelines.
Built on SOC 2 Type II certified multi-cloud partners from day one — hosting, auth, database, and AI layers are all independently audited.
GDPR-aligned privacy policy, cookie banner, and data processing disclosures in place.
Written security policies, access control procedures, and incident response plan documented.
Actively working toward our first SOC 2 Type I report (security, availability, confidentiality) with a certified auditor. Target: Q4 2026.
SOC 2 Type II continuous audit, plus HIPAA alignment and HITRUST for healthcare and regulated industries. Target 2027.
All of our partners are SOC 2 Type II and HIPAA certified. Your data runs on independently audited infrastructure.
The measures we implement and enforce regardless of our certification status.
We apply layered safeguards to ensure AI outputs are safe, accurate, and never trained on your content.
Honest answers to common security and privacy questions.
Our team is happy to answer security questions, review vendor questionnaires, or discuss DPA options for business customers.
Last reviewed March 2026 · Report a vulnerability