TRUST CENTER
Security you can verify
How Himaya protects your workspace, your data, and your customers — and the controls, certifications, and policies that back it up.
Data encryption
Tenant isolation
Vulnerability management
Incident response
Data residency
CONTROLS
How we protect your workspace
Defense-in-depth across data, identity, infrastructure, and operations — engineered in, not bolted on.
Encryption everywhere
All data is encrypted in transit with TLS 1.2+ and at rest with AES-256. Keys live in a dedicated KMS with scheduled rotation.
Access control
Least-privilege by default, SSO/SAML, enforced MFA, and full audit logging on every administrative action.
Tenant isolation
Each customer runs in a logically isolated tenant. Agent memory, data, and models never cross tenant boundaries.
Infrastructure security
Hardened cloud infrastructure, private networking, and continuous vulnerability scanning and patching.
Data residency
Choose where your data lives. Regional processing keeps data in your jurisdiction to meet local requirements.
Monitoring & response
24/7 monitoring with automated detection and a documented incident-response plan with defined SLAs.
Data privacy
We process only what’s needed to secure your workspace. Your content is never used to train shared models.
Business continuity
Automated backups, multi-region redundancy, and regularly tested disaster-recovery procedures.
POLICIES
Security policies & playbooks
The documented policies that govern how we operate. Full copies available on request.
Vulnerability Management Policy
How we discover, triage, and remediate vulnerabilities across our stack, including severity ratings and remediation timelines.
Read policy
Incident Response Plan
Our documented process for detecting, containing, investigating, and communicating security incidents end to end.
Read policy
How your data is handled
Encryption
AES-256 at rest and TLS 1.2+ in transit, with dedicated key management and rotation.
Residency
Regional processing across US, EU, and GCC so data stays in your jurisdiction.
Retention & deletion
Configurable retention windows and full data deletion on request or contract end.
Found a vulnerability?
We run a responsible-disclosure program and investigate every report. Reach our security team directly and we will respond quickly.
hello@himaya.ai
