Security is foundational to everything we build at Evolv Ai. This page outlines the measures we take to protect your data and our infrastructure.
Certifications#
- SOC 2 Type II — Annual audit covering security, availability, and confidentiality
- GDPR Compliant — Full compliance with EU data protection regulations
- CCPA Compliant — Compliant with California Consumer Privacy Act
- HIPAA Ready — Available on Enterprise plan with BAA
Infrastructure#
Hosting
Our infrastructure runs on industry-leading providers:
- AWS (primary) — Multi-region with automatic failover
- Vercel — Edge network for our application
- Cloudflare — DDoS protection and WAF
Encryption
- In transit: TLS 1.3 with HSTS
- At rest: AES-256 encryption for all data
- Backups: Encrypted and stored in geographically isolated regions
Network Security
- VPC isolation for production environments
- Web Application Firewall (WAF)
- DDoS protection via Cloudflare
- IP allowlisting for admin access
Access Controls#
For Users
- Two-factor authentication (2FA)
- Single Sign-On (SSO) via SAML 2.0 (Business plan+)
- Role-based access control (RBAC)
- Session management with automatic timeouts
For Employees
- Least-privilege access principle
- Mandatory 2FA on all systems
- Background checks for all employees
- Quarterly access reviews
- Hardware security keys for sensitive systems
Monitoring & Incident Response#
- 24/7 security monitoring and alerting
- Automated threat detection
- Documented incident response plan
- Regular security drills
- Public status page at status.Evolv Ai.com
Vulnerability Management#
- Continuous dependency scanning
- Quarterly penetration testing
- Annual third-party security audit
- Bug bounty program
Reporting Security Issues#
If you discover a security vulnerability, please report it responsibly:
Email: security@Evolv Ai.com PGP Key: Available at keys.Evolv Ai.com/security
We commit to:
- Acknowledging your report within 24 hours
- Providing regular updates on remediation
- Crediting you in our security advisories (with consent)
Please do not publicly disclose the issue until we've had a chance to address it.
Data Processing Agreement#
Customers on Business and Enterprise plans can sign a Data Processing Agreement (DPA). Contact [legal@Evolv Ai.com](mailto:legal@Evolv Ai.com).
Contact#
For security questions: [security@Evolv Ai.com](mailto:security@Evolv Ai.com)