Trust Centre
Institutional Security & Compliance
Enterprise assurance documentation is available transparently. The controls, certifications, and data protection commitments below govern both evaluation and production workspaces.
Encryption
TLS 1.3 in transit and AES-256 at rest. Keys are managed in FIPS 140-2 Level 3 hardware security modules.
Access Governance
Strict least privilege, hardware MFA enforced for all engineering staff, and continuous access audits.
Tenant Isolation
Workspace-scoped credentials, per-tenant traffic segmentation, and cryptographically partitioned metadata.
Continuous Monitoring
24/7 SIEM monitoring, behavioral anomaly detection, and automated incident response escalation protocols.
Data Handling
Zero Retention by Default.
Prompts and completions are processed entirely in ephemeral memory and discarded once responses are returned. Only metadata — token counts, latency, region, and policy version — is retained for auditability.
Upstream routing selects zero-retention endpoints where available. Where a provider cannot contractually guarantee zero retention, that model is excluded from workspaces configured for regulated data.
- Zero training on customer prompts or completions
- No human inspection of content without explicit written instruction
- Custom retention requires dual authorization and a DPA addendum
- Automated data purging within thirty days of contract termination
Data Residency
| Jurisdiction | Regions Available | Evaluation |
|---|---|---|
| United States | US East (N. Virginia), US West (Oregon) | Available |
| European Union | Frankfurt, Ireland | Available |
| United Kingdom | London | Available |
| Asia Pacific | Singapore, Sydney | Available |
| Japan | Tokyo | Available |
Regional pinning is enforced at the policy level. Traffic is never routed outside selected borders for capacity rebalancing.
Compliance
Independent Certifications & Audits
Audit packages are available under mutual non-disclosure. Evaluation applicants can request SOC 2 documentation during onboarding.
| Framework | Status | Scope | Last Reviewed |
|---|---|---|---|
| SOC 2 Type II | Certified | Security, Availability, and Confidentiality trust service criteria. | Q4 2025 |
| ISO 27001 | Certified | Information Security Management System (ISMS) across all cloud systems. | Q3 2025 |
| GDPR / UK GDPR | Compliant | Standard Contractual Clauses, Data Processing Agreements, regional processing. | Continuous |
| HIPAA Ready | Attested | Business Associate Agreement (BAA) available for covered entities. | Q4 2025 |
Responsible Disclosure
Security Vulnerability Reporting
We welcome coordinated vulnerability research. Please provide full reproduction steps, affected endpoints, and impact assessments. We commit to prompt triage and safe harbor for good-faith researchers.
PGP Key Fingerprint: 4A1C 09F2 6D3B 88E1 5C7A 2F04 9B6D 1E38 7C55 A912
Compliance Documents
- Data Processing Agreement
- Sub-processor Register
- Acceptable Use Policy
- Privacy Notice
- Platform Service Status
Security questionnaire requests: security@argonnetwork.biz.id.
Enterprise Evaluation
Verify Security Controls in Your Environment.
Initiate your institutional onboarding with declarative compliance parameters on argonnetwork.biz.id.