abeebaTrust Center.
Where our security and compliance program stands today, and what we're working toward. We update this page as status changes.
Certifications and frameworks.
| Framework | Status | Details |
|---|---|---|
| SOC 2 Type I | In progress | Controls being implemented; independent audit planned. |
| SOC 2 Type II | Planned | Follows Type I with an observation period. |
| ISO/IEC 27001 | Planned | Information security management system in design. |
| NIST AI RMF | Aligned | Our delivery methodology maps to the Govern, Map, Measure and Manage functions. |
| OWASP LLM Top 10 | Aligned | Used as the baseline for every AI application review. |
| GDPR / DPA | Available | Data processing agreements signed on request. |
| HIPAA BAA | On request | Business associate agreements available for healthcare engagements. |
How we protect client environments.
Least-privilege access
Engineers get named, time-limited access to client systems, approved by the client and logged.
Your data stays put
We never copy client data to Abeeba systems. Work happens inside your environment.
Secure engineering
Code review, dependency scanning and infrastructure as code on every engagement.
Vetted team
Background checks, confidentiality agreements and annual security training for all staff.
Incident response
Documented incident process with client notification within 24 hours of a confirmed incident.
Documentation
Architecture, access and change records delivered with every project.
Request security documentation.
Security questionnaires, policies and our standard DPA are available under NDA.
Security team
security@abeeba.online
For documentation requests and vulnerability reports. See our security page for disclosure guidelines.
Ready to run AI on your own terms?
Book a 30-minute consultation with an infrastructure engineer. You'll leave with a clear view of options, costs and next steps, whether or not you work with us.