Security at AssureCore
Security is foundational to a compliance platform. AssureCore is designed to help teams keep sensitive compliance work protected, traceable, and under their control.
Protection in transit and at rest
AssureCore is hosted on infrastructure that encrypts data at rest with AES-256 and in transit with TLS 1.2 or higher, and whose provider holds a SOC 2 Type II attestation. Access to production services is restricted and monitored using layered controls. Security-sensitive actions are recorded in an audit trail so teams can review who changed what and when.
Access and organization isolation
Each organization's workspace data is kept separate from other organizations' data, and role-based access controls limit who can see and change it.
AI and compliance data
AI-assisted features use the workspace context needed for the requested task. AssureCore does not use customer compliance data to train public models.
Reliability and responsible disclosure
Monitoring, backups, access controls, and operational procedures support availability and incident recovery. Report suspected security issues through your organisation's AssureCore support channel.