Security at Theoros
Your research data deserves enterprise-grade protection. We take security seriously so you can focus on your research.
SOC 2 Type II
Certified
GDPR
Compliant
HIPAA Ready
Available
ISO 27001
In Progress
Our Security Commitments
- checkWe never sell your data
- checkWe never train AI on your research data
- checkYou can export and delete your data anytime
- checkWe use enterprise-grade encryption
- checkWe're GDPR and CCPA compliant
Data Encryption
Your data is encrypted at every layer of our infrastructure.
| Layer | Method |
|---|---|
| In Transit | TLS 1.3, HTTPS everywhere |
| At Rest | AES-256 encryption |
| Database | Encrypted PostgreSQL |
| Backups | Encrypted, geo-redundant |
| Key Management | AWS KMS / HashiCorp Vault |
Infrastructure
Built on enterprise-grade cloud infrastructure with multiple layers of protection.
| Component | Provider | Security |
|---|---|---|
| Hosting | AWS (US, EU regions) | SOC 2 certified |
| Database | Amazon RDS | Encrypted, isolated VPC |
| CDN | CloudFlare | DDoS protection |
| File Storage | Amazon S3 | Server-side encryption |
Access Control
Multiple layers of authentication and authorization protect your account.
Authentication
bcrypt password hashing with optional two-factor authentication
Sessions
Secure, HTTP-only cookies with short expiration times
Authorization
Role-based access control for team collaboration
Admin Access
Limited admin access with logging and 2FA required
Our AI Training Policy
We do NOT train our AI models on your research data.
- checkYour documents are never used for model training
- checkYour codes and categories remain private
- checkAI processing happens in isolated, temporary sessions
- checkNo data is retained after processing
Our AI is trained on public research methodology literature, not customer data.
Enterprise
Enterprise Security Features
Additional security controls for organizations with advanced requirements.
SSO/SAML
Integrate with Okta, Azure AD, Google
Custom Roles
Define granular permissions
IP Allowlisting
Restrict access by location
Audit Logs
Detailed activity tracking
Data Residency
Choose EU or US hosting
On-Premise
Self-hosted deployment option
Security Resources
Documentation for security reviews and compliance assessments.
Need a custom security assessment? Email security@theoros.ai
Ready to Secure Your Research?
Start your free trial with enterprise-grade security from day one.