The four pillars of ChatLoom security.
Zero Model Training
Your uploaded documents, website pages, and customer chats are never used to train public LLMs or proprietary foundational weights. Strictly guaranteed by contract.
AES-256 & TLS 1.3
All data in flight is secured with TLS 1.3 cryptographic suites. Vector embeddings and transcripts at rest are protected by AES-256 with tenant-isolated customer KMS keys.
Automatic PII Stripping
Pre-inference guardrails scrub Social Security Numbers, credit card credentials, phone numbers, and patient identifiers before prompt tokens reach vector databases.
SAML SSO & SCIM
Enforce company-wide identity governance through Okta, Azure Active Directory, Google Workspace, or PingIdentity with automated SCIM user offboarding.
End-to-end data lifecycle diagram.
See how customer voice and text packets traverse our isolation perimeter, token redactor, and isolated vector store.
Official sub-processor directory.
We strictly limit our sub-processors to world-class cloud infrastructure partners with executed Data Processing Addendums (DPAs).
| Entity | Role / Purpose | Data Center Location | Certifications | DPA Status |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Core Cloud Hosting & KMS Key Vault | US (Virginia / Oregon), EU (Frankfurt) | SOC 1/2/3, ISO 27001, HIPAA | ✓ Executed |
| Google Cloud Platform (GCP) | Vector Database & AI Inference | US (Iowa / N. Virginia), EU (Belgium) | SOC 2/3, ISO 27017, HIPAA | ✓ Executed |
| Cloudflare, Inc. | WAF, Edge Routing & DDoS Mitigation | Global Edge Anycast | SOC 2 Type II, PCI-DSS Level 1 | ✓ Executed |
| Twilio Telecom Global | SIP Trunking & Carrier Voice Transport | Global Carrier Exchanges | SOC 2, ISO 27001 | ✓ Executed |
| Anthropic / OpenAI Enterprise | Model Token Processing (Zero Data Logging) | US / EU Dedicated Enclaves | SOC 2 Type II, HIPAA BAA | Zero-Retention DPA |
Request our SOC 2 Type II report.
Our security team is ready to complete your vendor risk questionnaire or provide access to our audited compliance portal under mutual NDA.