Trust.
What protects data today, what does not yet, and what would survive a change at the company.
Our current position
- Product safeguards
- Encryption at rest, access controls and audit records. Data access, export and deletion are explained in Sathi’s security overview and privacy policy.
- Independent assurance
- We do not currently hold SOC 2 or ISO certification, or a completed independent penetration-test report.
- Security partner
- Simplified Solutions (UK) supports specialist security engagements. Scope, contracting responsibilities and data access are agreed for each engagement. This partnership does not certify or independently audit Sathi.
- Company profile
- Registered name, corporate number, office and contact
If the company changes
An archive you have exported stays yours: a sealed, signed copy of your supported records and files, which you can download from your account at any time.
The rest still depends on how we run the service. Sathi runs on servers we operate, and we still run its database. During the beta our support access to your data is on by default, and you can switch it off in your account. Every admin request is recorded in a tamper-evident audit log, but that is enforced by our application, not yet by cryptography.
Report a security concern
Send vulnerabilities to security@sathi.ai. Business and company enquiries go to info@sathi.systems.