CompanySecurity & trust
Security & trust

Security you can show your auditors.

octwin.ai runs on CEQUENS infrastructure, so CEQUENS’s security certifications cover it.

ISO 27001Information security management
ISO 27017 · 27018Cloud security and the protection of personal data in the cloud
SOC 2 Type IISecurity, availability, processing integrity, confidentiality and privacy
PCI DSSPayment card data security
HOW WE PROTECT IT

Your data, your rules.

People see what their role allows

Every person in your team has a role. Copilot can never do more than the person using it.

The AI Agent stays in bounds

It answers from content you approved and systems you connected, and acts only through the tools you gave it.

Secrets stay with you

For in-app chat, your server holds the signing keys; the app never sees them. Connections to your systems store their credentials apart from the AI Agent.

Every action is on record

Conversations, tool calls and hand-overs are kept and visible to your team.

REGULATED SECTORS

Ready for your review.

Banks, insurers and healthcare providers have their own rules. We go through them with you.

Security review

Questionnaires, architecture and our certificates, for your security team.

Data processing

A data processing agreement and the list of our sub-processors.

Sector rules

Which topics must always go to a person, and what the AI Agent may say — set per project.

Need our security pack?

We’ll send the certificates and answer your questionnaire.