Compliance Certifications
We maintain the highest industry standards and regularly undergo rigorous third-party audits to ensure compliance.
CompliantSOC 2 Type II
Audited controls for security, availability, and confidentiality trust service principles with an observation period.
CompliantSOC 2 Type I
Audited controls for security, availability, and confidentiality trust service principles.
Resource Library
Access our security documentation, policies, and compliance reports.
SOC 2 Type II
Compliance report
SOC 2 Type I
Compliance report
Personnel Security Policy
Personnel Security Policy document
Acceptable Use Policy
Acceptable Use Policy document
Information Security Policy
Information Security Policy document
Access Control and Termination Policy
Access Control and Termination Policy document
Security controls
Our comprehensive security program includes controls across multiple domains to protect your data.
No security controls found.
Subprocessors directory
We carefully select and monitor all third-party services that process data on our behalf.
MongoDB
Data Stores & Warehouses
Pinecone
Data Stores & Warehouses
Mixpanel
Business Apps & Productivity
OpenAI
AI & ML Services
Render
Cloud Infrastructure & Platform Services
Sentry
Logging & Observability
Frequently Asked Questions
Find answers to common questions about our security and compliance practices.
Our Security Commitment
At Toffu AI, security isn't just a feature—it's foundational to everything we build. Our security-first mindset drives our development processes, infrastructure decisions, and organizational policies. We treat the data entrusted to us—whether from our customers, their end users, or anyone who interacts with our organization—with the utmost care and responsibility. Security is embedded in our DNA, enabling us to deliver innovative solutions without compromising on protection.
