Security & compliance

The secure way to put AI in front of your customers

Aide is SOC 2 Type II certified and GDPR and HIPAA compliant. Every conversation runs on enterprise-grade infrastructure, every action follows procedures your team approves, and every decision is logged for audit.Hosted on Amazon Web Services in the US. Anthropic's Claude models run at zero data retention; open-weight models run on Aide's own servers.
SOC 2 Type IIGDPRHIPAA
Certifications

Compliance your vendor review can verify

Agentic AI reads customer data and acts on it. That makes compliance a precondition to deployment, not a checkbox. Aide adheres to the highest standards of enterprise security.

SOC 2 Type II

An independent auditor verified that Aide's security controls, from data handling and access control to incident response, operated effectively over an extended monitoring period under the AICPA's SOC 2 standard. The report stays current through recurring audits.

GDPR

For businesses serving customers in the UK and EU, Aide processes personal data in line with GDPR: lawful processing, data subject rights, and consumer privacy protections in how the platform handles every conversation.

HIPAA

For healthcare organizations, Aide is HIPAA compliant: protected health information is handled with the safeguards the regulation demands, so teams responsible for patient data can use AI without putting it at risk.

Data protection

Your customers' data, protected at every layer

Every conversation is a person who trusted your business with their name, their address, their order history. Aide is built to keep that trust.

Hosted on Amazon Web ServicesAide runs on Amazon Web Services in the US East (N. Virginia) region: application servers, database and file storage. The website and dashboard are served by Cloudflare.
Zero data retentionAide uses Anthropic's Claude models and open-weight models that run on Aide's own servers. Claude runs at zero data retention through Anthropic's API, under a zero-data-retention agreement: the conversations it processes are not stored or used to train models. Data the open-weight models process stays on Aide's infrastructure.
Private cloud deploymentsAide can be provisioned in public or private clouds for sovereign AI deployments where data residency requirements demand it.
Data processing agreementA standing DPA governs how Aide processes personal data on your behalf, including confidentiality obligations and an up-to-date list of sub-processors. Read the DPA →

Security documentation

For security questionnaires, or vendor review documentation, contact our team. Our data processing agreement and privacy policy are available online.

Frequently asked questions

Yes. Aide is SOC 2 Type II certified. An independent auditor verified that Aide's security controls operated effectively over an extended monitoring period under the AICPA's SOC 2 standard, and the report stays current through recurring audits. Contact support@aide.app for the report.

Yes. For businesses serving customers in the UK and EU, Aide processes personal data in line with GDPR requirements: lawful processing, data subject rights, and consumer privacy protections in how the platform handles every conversation. A data processing agreement is available online.

Yes. For healthcare organizations, Aide handles protected health information with the safeguards HIPAA demands, so teams responsible for patient data can deploy AI agents without putting it at risk.

Aide runs on Amazon Web Services in the US East (N. Virginia) region. AI replies are written by Anthropic's Claude models through Anthropic's API, and search embeddings are computed with an open-weight model on Aide's own servers, so that data never goes to a model provider. Teams with data-residency requirements can talk to us about Enterprise.

No. Aide's Claude models run at zero data retention through Anthropic's API. Anthropic operates under a zero-data-retention agreement, so the conversations it processes are not stored by Anthropic or used to train its models. Aide's open-weight models run on Aide's own servers, so that data stays on Aide's infrastructure.

The Agent Governance Engine bounds every word and action: Aide executes only the procedures your team writes and approves, presents only the options configured for the account state, acts only when it is certain, and escalates the rest to a person with full context. Automation is deployed per intent at the level you choose: none, human-in-the-loop, or fully agentic.

Yes. The Action Trace records every automated action: which intent was recognized, which procedure ran, and what was done on the account. Per conversation and across the whole operation, so a question from an auditor, a regulator, or a partner gets an answer backed by the record.

Contact support@aide.app for security documentation, completed questionnaires, and the SOC 2 report. Our data processing agreement, privacy policy, and terms are published online.

Deploy AI agents your security team can sign off on

SOC 2 Type II certified, GDPR and HIPAA compliant, governed by the procedures you approve, and logged for audit.