Security and trust

OptiServe AI is engineered for the data your business runs on. Encryption everywhere, isolated tenants, and the compliance posture growing service companies need.

Encryption

Encrypted in transit and at rest

TLS 1.3 for every connection (HSTS preloaded)
AES-256 encryption at rest on every database
Per-tenant key isolation
Encrypted off-site backups (daily, 30-day retention)
Field-level encryption for SSN / payment data
Automatic key rotation every 90 days

Infrastructure

Hosted on hardened cloud infrastructure

Microsoft Azure — US East / US West regions
Multi-AZ Postgres with automated failover
DDoS protection and WAF on every endpoint
Network isolation per tenant
24/7 infrastructure monitoring
Disaster-recovery RTO < 1h, RPO < 15m

Access

Identity, access & audit

SSO via SAML, Google, Microsoft (Enterprise)
SCIM user provisioning
Role-based access control with custom roles
Granular per-action audit logs
Session timeout and IP allowlist
2FA available on every plan

Compliance

Compliance posture

SOC 2 Type II — in progress (audit Q3 2026)
HIPAA + Business Associate Agreement available on Enterprise
GDPR / CCPA data subject request workflows
PCI DSS — payments handled by Stripe (Level 1 PCI)
Annual third-party penetration testing
Data export & deletion APIs

Practices

Engineering & people practices

Mandatory code review with security checklist
Static analysis & dependency scanning on every PR
Quarterly security training for all employees
Background checks for every team member
Least-privilege production access (break-glass workflow)
Public security@optiserveai.tech disclosure channel

Need our security pack?

SOC 2 progress letter, pen-test summary, and BAA available on request.

Request Security Pack security@optiserveai.tech