Trust center
Security is the product, not a checkbox
AppPilot AI is deployed inside regulated fintech, healthcare and public-sector environments. The same controls apply to every plan, free tiers included.
SOC 2 Type II
Audited annually
ISO 27001
Certified ISMS
GDPR
DPA + SCCs available
HIPAA
BAA on Enterprise
Controls
What we do with your data
Encryption everywhere
TLS 1.3 in transit, AES-256 at rest, envelope-encrypted secrets with automatic key rotation.
Hard tenant isolation
Every row is workspace-scoped and enforced at the database layer with row-level security policies.
Identity & access
SAML SSO, SCIM provisioning and role-based access control across owner, admin, developer and viewer roles.
Scoped API keys
Least-privilege keys per environment, prefix-visible only, revocable instantly with last-used tracking.
Audit everything
Immutable audit logs for configuration, key, membership and data-access events, exportable to your SIEM.
Data residency
Choose EU or US processing regions. Retention windows are configurable down to zero-retention mode.
Need our security package?
Penetration test summaries, SOC 2 reports, subprocessor lists and architecture diagrams are available under NDA.