SectorFlow Security & Data Privacy Overview

Last updated: March 4, 2025

Please submit potential vulnerabilities to [email protected].

For any security-related questions, feel free to contact us at [email protected].

Please note that we are still in the journey of growing our product and improving our security posture. This page explains what we’re doing now and helps you decide if it’s right for your needs. We advise that you exercise caution no matter what AI tool you are using.

Certifications

SectorFlow is pursuing SOC 2 Type II certification. Please email [email protected] to request a copy of our progress report.

We align with:

• GDPR (EU data rights)
• HIPAA (health data standards)

Client Security

• Permissions: Restrict user actions by role or team.
• Multi-Tenancy: Data segmentation within your organization via private workspaces with role-based access control and granular security settings.
• Authentication: Enforce MFA for all accounts (SAML/SSO support).
• Audit Logs: Track user activity, model access, and data exports in real time.

AI-Specific Safeguards

• Model Vetting: Due diligence is performed on all third-party LLMs and libraries, including initial security assessments and ongoing monitoring of their security posture and compliance.
• Output Filtering: Automated checks to flag high-risk responses (e.g., PII leaks, biased content).