Security
Security and data handling
SOC 2 Type II audited document fraud detection. Personal data handled under GDPR. Files stay where you need them: our cloud, your VPC or on-prem.
At a glance
What’s in place.
- Audit
- SOC 2 Type II. Independently audited controls; the report is available on request.
- Privacy
- Personal data handled under GDPR.
- Hosting
- Trustable cloud in the US, EU or APAC.
- Deployment
- Your own VPC or on-prem, or keep files in your cloud while Trustable runs the checks.
- Data handling
- Agreed in writing before you share any file. Customer files are governed by your customer agreement, not this website’s privacy policy.
- AI results
- No AI is 100% accurate. Every finding comes with its evidence, and a person decides.
- This website
- Analytics only with your consent. Privacy policy · Cookie notice
How a file is handled.
Agreed first. Checked in your chosen environment. Decided by your team.
01
Agree data handling
Scope, hosting and retention, in writing, before any file.
02
Send files
By API or in the web app, over HTTPS.
03
Review the evidence
Each finding, where it is, how strong. Your team decides.
FAQ
What your security review will ask.
What does the SOC 2 Type II audit cover?
The Trustable service: the controls around how files are received, processed, stored and accessed, audited independently over a period of time rather than at a single point. Personal data is handled under GDPR. The audit report is available on request: book a 20-minute call and ask for it, and we share it with your security team.
Where are files processed?
In the Trustable cloud, hosted in the US, EU or APAC, or in your own VPC or on-prem. You can also keep files in your cloud while Trustable runs the checks. The hosting choice is agreed before any file is shared.
What do we agree before sharing files?
Scope, hosting and retention, in writing. Customer files are governed by that agreement, not by this website’s privacy policy, which covers only trustable.ai.
What happens when Trustable is wrong?
No AI is 100% accurate, so Trustable is built for it: every finding carries its evidence (where it is on the file, how the file was changed, how strong the signal is), and a person reviews each flag before anything happens to the application or claim. A genuine file that was flagged gets cleared by that review; a fake that was missed is why the checks are one layer in your process, not the only one.
Does this website track visitors?
Only with consent. Analytics load after you accept the cookie banner, a Global Privacy Control signal counts as a decline, and you can change your choice from Cookie settings in the footer. See the cookie notice.
Security
Questions for your security review?
Book a 20-minute call. We’ll walk through hosting, data handling and the SOC 2 report.
Book a demo