--- title: "Security and Privacy | Clearly AI" description: "Discover how Clearly AI prioritizes your privacy through responsible data practices, secure handling, and user-first policies designed to protect." canonical: https://clearly-ai.com/trust/security-privacy --- # Security and Privacy Discover how Clearly AI prioritizes your privacy through responsible data practices, secure handling, and user-first policies designed to protect. ## Infrastructure Secure, scalable, AWS-based architecture. ## Access Control A robust set of in-product data access and admin controls for greater visibility and control over your data. ## Data Privacy Our privacy program aligns our practices with regulations such as GDPR and CCPA. ## Data Security Data is encrypted, stored securely, and segregated. ## Governance, Risk, and Compliance Our information security program, policies, and vendor reviews safeguard customer data. ## AI Governance We employ state-of-the-art AI protections, including zero-day retention agreements and guardrails. ## Secure Infrastructure ### Network Security External traffic is filtered through a Web Application Firewall with role-based security groups. ### Built on AWS All infrastructure is deployed on AWS using secure configurations and VPCs. ### Data Center Redundancy Data is stored in the Oregon (us-west-2) AWS region across multiple availability zones. ## Data Security ### Encryption and Protection Data is encrypted in transit using TLS 1.2+ and at rest with server-side encryption in AWS S3 and DynamoDB. ### Single-Tenant Infrastructure We offer robust single-tenant stacks for enterprise customers, allowing for increased data isolation. ### Logical Segregation All data in our multi-tenant deployments is logically segregated, and enterprise customers can elect to add organization segregation to their single-tenant deployments. ## Access Control ### Administrator Access Administrators can manage user roles, permissions, and access to projects. ### Login Security We support 2FA, single sign-on (SSO), and domain-based login restrictions for enhanced security. ### Confidential Information Access to customer data is restricted to authorized employees following strict confidentiality policies. ## Governance, Risk, and Compliance ### Information Security We maintain a formal program to monitor and enforce security controls and compliance. ### Security Policies We maintain comprehensive policies, including incident response, access control, and data retention. ### Subprocessor Management Vendors are carefully reviewed and reassessed annually to ensure compliance to security and privacy standards. ## Data Privacy ### Data Deletion and DSAR Customers can request data deletion or perform a data subject access request at any time. ### Data Usage Customers upload specific data to Clearly AI, and that data is solely used to perform requested reviews. ## AI Governance ### AI Data Usage Customer data is not used to train AI models, and guardrails are implemented to minimize hallucinations. ### Zero-Day Retention We have Zero-Day Retention agreements with large language model providers, including Open AI and Anthropic. ## Learn more - [Secure everything that ships](https://clearly-ai.com) - [We built the tool we wished we had](https://clearly-ai.com/about-us) - [One platform. From intake to remediation.](https://clearly-ai.com/platform) - [Know everything that needs a review. Skip the 300-question form.](https://clearly-ai.com/platform/security-intake) - [Ask only what matters. Get it right the first time.](https://clearly-ai.com/platform/conversational-intake) - [Every finding, tracked to a decision](https://clearly-ai.com/platform/resolve/risk-registry) - [Show leadership and auditors exactly what security reviewed](https://clearly-ai.com/platform/resolve/reporting) - [Security reviews you can stand behind, every time](https://clearly-ai.com/platform/quality) - [Threat models built from the tools you already use](https://clearly-ai.com/integrations) - [Threat models that know about today's attacks](https://clearly-ai.com/platform/threat-intelligence) - [Automate every step around the review](https://clearly-ai.com/platform/workflows) - [Threat models your teams can work on together](https://clearly-ai.com/platform/collaboration) - [Understand the system before the review starts](https://clearly-ai.com/platform/enterprise-context-graph) - [Trust, security, and deployment](https://clearly-ai.com/platform/trust-security-and-deployment) - [Every plan reviewed. Every risky change threat modeled.](https://clearly-ai.com/platform/ide-and-mcp) - [Verify what actually shipped](https://clearly-ai.com/platform/control-and-remediation-verification) - [A current threat model for everything that ships](https://clearly-ai.com/solutions/continuous-threat-modeling) - [Prove every product that ships meets your security bar](https://clearly-ai.com/solutions/product-security-assurance) - [Privacy reviews your team can stake decisions on](https://clearly-ai.com/solutions/privacy) - [Every vendor reviewed against your standards](https://clearly-ai.com/solutions/third-party-risk) - [Review every design before it's built](https://clearly-ai.com/solutions/design-and-architecture-reviews) - [Secure the AI you build, buy, and code with](https://clearly-ai.com/solutions/ai-agentic-security) - [Every regulation you answer to. One review process.](https://clearly-ai.com/solutions/compliance) - [Every product ready for the Cyber Resilience Act without growing your team](https://clearly-ai.com/solutions/compliance/cyber-resilience-act) - [Build vs. buy for security review automation](https://clearly-ai.com/compare/claude-chatgpt) - [The ThreatModeler alternative built from your own docs, code, and policies](https://clearly-ai.com/compare/threatmodeler) - [The Clover Security alternative with findings your team can trust](https://clearly-ai.com/compare/clover) - [The Prime Security alternative for every review your team runs](https://clearly-ai.com/compare/prime) - [Security and Privacy](https://clearly-ai.com/trust/security-privacy) - [Clearly AI Privacy Policy](https://clearly-ai.com/trust/privacy-policy) - [Clearly AI Subprocessors](https://clearly-ai.com/trust/subprocessors) - [Contact](https://clearly-ai.com/contact) - [Contact Enterprise Sales](https://clearly-ai.com/demo) - [Latest from the Clearly AI blog](https://clearly-ai.com/blog) - [In the news](https://clearly-ai.com/press) - [How Ericsson Enterprise Wireless Solutions cut review times by up to 80%](https://clearly-ai.com/customer-stories/ericsson) - [How HID Global reviews 300+ products for the Radio Equipment Directive with the team it already has](https://clearly-ai.com/customer-stories/hid-global) - [How Rivian scaled privacy and AI governance reviews 4x without adding headcount](https://clearly-ai.com/customer-stories/rivian) - [Part 2! Okay, privacy is different from security. Now what?](https://clearly-ai.com/blog/part-2-okay-privacy-is-different-from-security-now-what) - [How AI is rewiring our product engineering workflow](https://clearly-ai.com/blog/how-ai-is-rewiring-our-product-engineering-workflow) - [Good Data Scientists and Bad Outcomes, Part 1: What's the difference between security and privacy work?](https://clearly-ai.com/blog/good-data-scientists-and-bad-outcomes-what-s-the-difference-between-security-and-privacy-work) - [Why I Joined Clearly AI](https://clearly-ai.com/blog/why-vp-marketing-joined-clearly-ai) - [Skip the Marketing: Clearly AI for Technical People](https://clearly-ai.com/blog/clearly-ai-technical-explanation) - [Clearly AI Raises $8.4M Seed Round to Scale Product Security](https://clearly-ai.com/blog/seed-round) - [Why We Started Clearly AI](https://clearly-ai.com/blog/why-we-started-clearly-ai) - [Applying AI to Threat Modeling - Where AI Thrives, Survives, and Dies](https://clearly-ai.com/blog/applying-ai-to-threat-modeling) - [Why We Build in Public](https://clearly-ai.com/blog/why-we-build-in-public) - [Solving the Threat Modeling Bottleneck with AI Workflows](https://clearly-ai.com/blog/solving-the-threat-modeling-bottleneck-with-ai-workflows) - [Clearly AI Named Finalist in the 2025 Okta Startup Challenge](https://clearly-ai.com/blog/clearly-ai-named-finalist-in-the-2025-okta-startup-challenge) - [Security, SOC 2, & Startups](https://clearly-ai.com/blog/security-soc-2-startups) - [Building Reliable AI Systems for Security and Privacy Reviews](https://clearly-ai.com/blog/building-reliable-ai-systems-for-security-and-privacy-reviews) - [How to Automate Security and Privacy Reviews with Clearly AI](https://clearly-ai.com/blog/how-to-automate-security-and-privacy-reviews-with-clearly-ai) - [One Year of Clearly AI](https://clearly-ai.com/blog/one-year-of-clearly-ai) - [Navigating EU RED Compliance: Meeting the August 2025 Deadline](https://clearly-ai.com/blog/navigating-eu-red-compliance-meeting-the-august-2025-deadline) - [The AI Engineer Cheat Sheet](https://clearly-ai.com/blog/the-ai-engineer-cheat-sheet) - [Intelligent Vendor Risk Assessments](https://clearly-ai.com/blog/intelligent-vendor-risk-assessments) - [Clearly AI wins the AWS Bedrock Builder's Challenge](https://clearly-ai.com/blog/clearly-ai-wins-the-aws-bedrock-builder-s-challenge) - [Reviews, reviews, reviews!](https://clearly-ai.com/blog/reviews-reviews-reviews) - [Halfway through YC](https://clearly-ai.com/blog/halfway-through-yc) - [llms.txt — site overview for LLMs](https://clearly-ai.com/llms.txt) - [llms-full.txt — full site content for LLMs](https://clearly-ai.com/llms-full.txt) - [sitemap.xml — all public routes](https://clearly-ai.com/sitemap.xml) - [Documentation](https://docs.clearly-ai.com/docs) [Canonical page](https://clearly-ai.com/trust/security-privacy)