Security foryour research.
AllMind keeps your firm’s research private, controls who can access it, and never uses customer content to train models.
Your data stays yours.
No model training
Customer content is never used to train our models or third-party LLMs.
Private data
Your firm’s content stays logically separated from other customers’ data, with sharing controlled by your team.
Full visibility
Access is logged and systems are monitored for unusual activity.
Secure access
Access follows user permissions. Agents inherit those permissions and cannot expand them.
Encrypted everywhere
Customer content is encrypted with AES-256 at rest and TLS in transit.
Audited & tested
Our security program includes a SOC 2 Type II audit, independent assessments, and penetration testing.
SOC 2 Type II
Independent audit.
Documented controls.
Evidence for your review.
Review our SOC 2 Type II report, security policies, and supporting documentation in the AllMind Trust Center.
Some documents require an access request and may be shared under NDA.
Review security documentsQuestions,
answered.
The details behind how we protect your research.
Does AllMind train models on our research?
No. Customer content, including uploaded documents and data accessed through your connected systems, is not used to train our models or third-party LLMs. We use private model endpoints and work with model providers under zero data retention policies.
How is our data stored and separated from other customers?
Customer content is stored with logical separation between customers and access controls. Dedicated hosting can be arranged under a separate agreement. AllMind personnel access customer content only when necessary for support, service maintenance, or legal obligations.
What can an agent access?
Agents inherit the permissions of the user running them and cannot expand those permissions. Your team controls sharing and which internal systems are connected. Access is logged so activity can be reviewed.
How does AllMind encrypt customer content?
Customer content is encrypted with AES-256 at rest and TLS in transit. These controls protect stored content and communications with the platform.
What does zero data retention cover?
Zero data retention applies to our model providers. AllMind stores the content and records needed to deliver the service. Under our standard terms, customer content is available for export for 30 days after termination, then deleted within 30 days, unless the law requires retention.
Where can we review security reports and policies?
Our SOC 2 Type II report and security policies are available through the AllMind Trust Center. Some documents require an access request and may be shared under NDA. Our team can discuss the scope relevant to your deployment.
Let’s talk security.
Walk through your firm’s requirements with our team, from data handling to deployment.