Data encryptedAES-256 at rest
{ security & privacy }
Your users’ context is
theirs to control.
Security is built into every layer of MatiAI, from encryption and tenant isolation to granular deletion and portable exports.
Read the security briefProtectedAll controls active100%
RECENT SECURITY EVENTS
Access verifiedService account
Retention appliedPolicy: 90 days
OUR SECURITY PROMISE
Memory without compromise.
Your data is encrypted, isolated, and never used to train shared models. You decide what is remembered, where it lives, and when it is deleted.
- 01Encrypted everywhere
TLS 1.3 in transit and AES-256 at rest, with per-tenant key separation.
- 02Tenant isolated
Logical separation enforced across every request and every stored memory.
- 03No training on your data
Your memories never improve a shared or foundation model. Ever.
- 04You own deletion
Delete anything, anytime — and export everything before you go.
CONTROLS
Eight controls, always on.
Security is not a tier. Every plan ships with the same encryption, isolation, and export controls — enterprise adds deployment and identity depth.
Deployment control
Cloud, private cloud, VPC, and self-hosted options with identical APIs.
Granular deletion
Delete by memory, user, namespace, or workspace — instantly and irreversibly.
Portable exports
Export structured memories and full provenance as JSON at any time.
Audit trails
Trace every access, update, policy action, and deletion event with signed logs.
Encryption
TLS 1.3 in transit and AES-256 at rest, with per-tenant key separation.
Access control
Scoped API keys, per-user OAuth tokens, and SSO/SAML on enterprise plans.
Data residency
Pin memory to US, EU, or APAC regions per workspace for compliance.
Tenant isolation
Logical separation enforced on every request, with no cross-tenant leakage.
COMPLIANCE
Programs we are building toward.
We are investing in independent attestations and aligning our controls with the frameworks customers ask for most.
SOC 2 Type IIIn progress — controls mapped
GDPRDPA available · DSAR-ready
ISO 27001Roadmap — 2026
HIPAA-readyBAA on Enterprise
CCPAHonored on request
| Subprocessor | Purpose | Region |
|---|---|---|
| Cloud infrastructure | Hosted control & data plane | US / EU / APAC |
| LLM provider (optional) | Extraction assistance | Configurable |
| Observability | Metrics & logs | US |
| Email delivery | Transactional email | US / EU |
RESPONSIBLE DISCLOSURE
Found a vulnerability?
We reward responsible disclosure and respond within one business day. Report security issues to security@matiai.in with reproduction steps and impact.
Report
Email security@matiai.in with full details and impact.
Acknowledge
We confirm receipt within 1 business day and triage severity.
Remediate
We patch, disclose, and credit reporters who follow responsible disclosure.
{ Start building }
Give your AI a memory it can trust.
Free to start. Open by design. Ready for production.
Get MatiAI