At Hypatos, keeping our customers' documents and data safe sits at the core of everything we do.
Our security program is led by a dedicated team and built on an ISO 27001-certified ISMS, with ISO 27017 and ISO 27018 extensions for cloud and privacy. It is independently verified by a SOC 2 Type II attestation covering Security, Availability, and Confidentiality, with mappings to HIPAA and BSI C5. We process personal data in accordance with GDPR, and we make a completed CAIQ available on request for full transparency. Effectiveness is maintained through continuous monitoring in our compliance platform, reinforced by regular internal reviews, third-party audits, and independent penetration testing.
For more information, reach out to our Security team at security@hypatos.ai.
Product Security
Product Security
We pay great attention to enterprise features such as access control and single sign on. We are happy to provide more details about our enterprise features upon request.
Data Security
Data Security
We follow industry best practices for data security. We are happy to provide more details about our data security practices upon request.
App Security
App Security
We take application security seriously and are putting together a program to monitor internal apps.
AI
AI
We take the usage of AI seriously in our organization and work to ensure security and reliability of the AI.
Data Privacy
Data Privacy
Privacy of customer data is top of mind. We follow industry best practices and follow all applicable privacy regulations.
Access Control
Access Control
Access is tightly monitored and controlled at our company. We are happy to provide more details about our access control practices upon request.
Infrastructure
Infrastructure
We take great care to work with best-in-class infrastructure providers that provide secure computing and storage. We are happy to provide more details about our infrastructure upon request.
Endpoint Security
Endpoint Security
We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.
Network Security
Network Security
We protect our corporate network against external & internal threats.
Corporate Security
Corporate Security
We implement internal measures and practices to maintain a high standard of security.
Policies
Policies
We are currently working with experts to put together our company policies. Please contact us for more details.
Incident Response
Incident Response
We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.
Risk Management
Risk Management
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
Asset Management
Asset Management
We have strict asset management policies in place to ensure that all assets are accounted for and secure.
BC/DR
BC/DR
We have a business continuity plan in place to ensure that we can continue to operate in the event of a disaster.
Training
Training
We provide security awareness training to all employees to ensure that they are aware of security best practices.
Change Management
Change Management
We have a change and configuration management process in place to ensure that changes are properly reviewed and approved.
Continuous Monitoring
Continuous Monitoring
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.