---
title: "Security: SOC 2 Type II, GDPR, VPC or on-prem | Trustable"
url: "https://trustable.ai/security"
description: "Trustable is SOC 2 Type II audited and handles personal data under GDPR. Host in the US, EU or APAC, in your own VPC or on-prem. Request the SOC 2 report."
---

Security

# Security and data handling

SOC 2 Type II audited document fraud detection. Personal data handled under GDPR. Files stay where you need them: our cloud, your VPC or on-prem.

[Request the SOC 2 report](https://cal.com/scamai/20min?utm_source=trustable.ai&utm_medium=website&utm_campaign=book_demo&utm_content=security)

Your files · Your control

At a glance

## What’s in place.

**Audit:**

SOC 2 Type II. Independently audited controls; the report is available on request.

**Privacy:**

Personal data handled under GDPR.

**Hosting:**

Trustable cloud in the US, EU or APAC.

**Deployment:**

Your own VPC or on-prem, or keep files in your cloud while Trustable runs the checks.

**Data handling:**

Agreed in writing before you share any file. Customer files are governed by your customer agreement, not this website’s privacy policy.

**AI results:**

No AI is 100% accurate. Every finding comes with its evidence, and a person decides.

**This website:**

Analytics only with your consent. [Privacy policy](https://trustable.ai/privacy) · [Cookie notice](https://trustable.ai/cookies)

## How a file is handled.

Agreed first. Checked in your chosen environment. Decided by your team.

### Agree data handling

Scope, hosting and retention, in writing, before any file.

### Send files

By API or in the web app, over HTTPS.

### Review the evidence

Each finding, where it is, how strong. Your team decides.

FAQ

## What your security review will ask.

### What does the SOC 2 Type II audit cover?

The Trustable service: the controls around how files are received, processed, stored and accessed, audited independently over a period of time rather than at a single point. Personal data is handled under GDPR. The audit report is available on request: book a 20-minute call and ask for it, and we share it with your security team.

### Where are files processed?

In the Trustable cloud, hosted in the US, EU or APAC, or in your own VPC or on-prem. You can also keep files in your cloud while Trustable runs the checks. The hosting choice is agreed before any file is shared.

### What do we agree before sharing files?

Scope, hosting and retention, in writing. Customer files are governed by that agreement, not by this website’s privacy policy, which covers only trustable.ai.

### What happens when Trustable is wrong?

No AI is 100% accurate, so Trustable is built for it: every finding carries its evidence (where it is on the file, how the file was changed, how strong the signal is), and a person reviews each flag before anything happens to the application or claim. A genuine file that was flagged gets cleared by that review; a fake that was missed is why the checks are one layer in your process, not the only one.

### Does this website track visitors?

Only with consent. Analytics load after you accept the cookie banner, a Global Privacy Control signal counts as a decline, and you can change your choice from Cookie settings in the footer. See the [cookie notice](https://trustable.ai/cookies).

Security

## Questions for your security review?

Book a 20-minute call. We’ll walk through hosting, data handling and the SOC 2 report.

[Book a demo](https://cal.com/scamai/20min?utm_source=trustable.ai&utm_medium=website&utm_campaign=book_demo&utm_content=security)