Security & compliance
Built to the standard your investors expect
Haydn is SOC 2 and ISO 27001 certified, independently penetration tested, and never trains AI on your data.
Independently audited. Continuously monitored through Vanta.
- ISO 27001Certified
- SOC 2Certified
- GDPRUK and EU compliant
- 2FAMandatory for every user
Security built in at every layer
Hosting and data residency
Customer data is stored at rest on AWS infrastructure in the United Kingdom. Our infrastructure providers are independently certified against ISO 27001 and SOC 2.
AWS security →Encryption and isolation
Every connection is protected with TLS, and customer data is encrypted at rest with AES-256.
- Row-level security isolates every customer at the database layer
- Memory-hard hashing for all passwords and credentials
- Production data kept separate from development and test
Access and authentication
Workspaces are invite-only, and every account is protected by layered access controls.
- Mandatory two-factor authentication
- Sign in with Google or Microsoft (OAuth 2.0)
- Role-based access control with full audit logging
Compliance and certification
Our information security management system is independently certified and continuously monitored through Vanta.
- ISO/IEC 27001:2022 certified
- SOC 2 Type I report available; Type II attestation in progress
- Privacy programme aligned with GDPR and UK GDPR
Testing and incident response
Regular third-party penetration tests and continuous vulnerability scanning find weaknesses before they become risks. A documented incident response plan defines roles, severity levels, and breach notification in line with GDPR.
Resilience and your data
Continuous database backups with point-in-time recovery, and documented business continuity and disaster recovery plans with defined recovery objectives.
- Your documents and financials are never used to train AI models
- Our AI providers are bound to the same restriction
Questions about our security?
Our SOC 2 report, ISO 27001 certificate, and policies are available at trust.haydn.ai. For anything else, write to support@haydn.ai.