Security & Governance

CREID runs on Google Cloud (SOC 2 / ISO 27001). Each client org is siloed. All data is encrypted in transit (TLS 1.2/1.3) and at rest (AES-256).

Role-based access (Admin / Editor / Viewer). Audit logs record who changed what and when.

Daily backups with point-in-time restore. Full deletion on termination. Client data is never shared, sold, or repurposed beyond the org that owns it.

SOC 2 Type II certification planned; current controls match the standard. A standard Data Processing Agreement (DPA) is available on request.

Questions?

Contact muller@creid.ai.