#yellow.ai Privacy, Security & Compliance

Adam Myers — Sat, 21 Dec 2024 23:47:22 +0000

https://yellow.ai/platform/enterprise-grade-security/

New AI-Based Customer Service Automation Platform.

Privacy Statement, security & compliance are at the heart of our platform

Platform compliance

HIPAA

Health Insurance Portability and Accountability Act

ISO 27001

ISO/IEC 27001:2022 Certification

ISO 27701

ISO/IEC 27701:2019 Certification

SOC 2 Type II

SOC 2 Type II Compliant

Platform security

SSO

For starters, our platform can be accessed by authorization with user-level access defined. We leverage industry-standard SSO solutions to grant company users access to their company’s bot project and integrations. We support Google SSO, Microsoft SSO, ADFS & Azure AD at the platform level. In addition to that, at the bot level, we support AD, LDAP, SAML and have standard support for OAuth2. Permission. Password and credential storage

Network and data security

Data hosting

The Yellow.ai services and data are hosted in the US, EU, Singapore, India, Indonesia and UAE. And because data is gold, our platform was built with disaster recovery in mind. All of our infrastructure and data are spread with N+1 availability zones and will continue to work should any one of the data centers fail. Fingers crossed.

Virtual private cloud and access control lists

Data hosting

Encryption

All the data in transit to and fro the platform is SSL TLS 256 encrypted (HTTPS). And to keep access in check, our keys are maintained in Vaults, and the same are recycled every quarter.

Pentest and vulnerability scanning

Yellow.ai uses 3rd party security tools to continuously scan for vulnerabilities. Our dedicated security team members respond to issues raised. In fact, every year, we engage third-party security experts to perform detailed penetration tests on the chatbot platform.
For complying with various countries and their data laws, we also offer redaction/masking of PII/sensitive information on the data layer of the yellow.ai platform. We’ve also got you covered for WAF, DDOS, IPS & IDS.