SOC 2 Type II
Independent attestation covering security, availability, and confidentiality — audited annually. Reports available under NDA.
Audited since 2024Every workspace is its own tenant — its own database, domain, and identity. QaiS reads only your data, and every action it takes is logged, attributable, and reversible.
Independent attestation covering security, availability, and confidentiality — audited annually. Reports available under NDA.
Audited since 2024Every workspace gets its own database, blob namespace, and identity scope. Cross-tenant queries are blocked at the database, not just the app.
Own DB · domain · keysQaiS never trains on your tenant data. Prompts and context stay scoped to the workspace and are not retained by the model provider beyond the request.
Your work teaches no one elseEvery QaiS tool call and every user action is logged with the actor, a before/after diff, and one-click undo. Retention is plan-tiered.
Logged · attributable · reversibleTLS 1.3 in transit and encrypted at rest. Prompts sent to LLM providers travel over TLS under data-processing agreements that forbid training.
In transit · at restEvery request is authenticated and tenant-scoped. Role-based access across the workspace, with single sign-on on Business and Enterprise plans.
SSO on Business & EnterpriseRun on the region you choose — US-East, US-West, EU-West (Frankfurt), UK (London), or APAC (Sydney) on Enterprise. The data is yours to export anytime.
Region of your choiceEvery action carries a before/after diff and a one-click revert. Full export in JSON and raw blobs on exit, then a verified hard-delete with a signed certificate.
One-click undo · clean exitQaiS runs inside your tenant, and only your tenant. It works under your team's rules — who can call which tool, and on whose behalf — and it can't reach another workspace's data.
Every call it makes is attributed to a person and a moment, carries a before/after diff, and can be reversed with one click. Nothing the agent does is off the record.
The log below is the same audit trail your admins see — every tool-call, timestamped, attributable, and reversible.