Security & Compliance

Security

Synaura is built with security-first principles. We handle sensitive organizational knowledge and treat it with the highest level of care.

Encryption

AES-256 at rest, TLS 1.3 in transit. Per-organization encryption keys.

SOC 2 Type II

10 automated compliance controls. Evidence pack on enterprise tier.

Access Control

Role-based access (Admin/Editor/Viewer). Session management with automatic expiry.

Data Isolation

Complete multi-tenant isolation. Organization data never mixed across tenants.

Infrastructure

Global edge network (300+ data centers)
Database with automatic replication and encryption at rest
Data processed and stored within the same network
DDoS protection at all tiers

AI Processing

AI queries processed via leading foundation models (data not used for training)
No customer data is used to train or improve AI models
You can delete all AI-processed data at any time

Authentication

Passwords hashed with PBKDF2-SHA256 (100,000 iterations)
256-bit cryptographically random session tokens
Automatic session expiry, rate limiting, HMAC-signed OAuth state

Responsible Disclosure

Found a vulnerability? Email security@synaura.ai. We respond within 24 hours.