Security for sensitive case material

Viewpoints.ai is SOC 2 Type II audited. Our agreements with the AI providers we use include zero data retention and prohibit using customer data to train or fine‑tune models. This page explains how we handle case material.

How we protect your data

These are the main controls we use to protect customer data. You can request our current SOC 2 Type II report under NDA through the trust center.

SOC 2 Type II

An independent auditor reviews how our security, availability, and confidentiality controls operated during the audit period. You can request the current report under NDA through the trust center.

Zero data retention with AI providers

Our agreements with the AI providers we use include zero data retention.

No training on customer data

We do not use customer data to train or fine‑tune models.

Encrypted in transit and at rest

We encrypt materials in transit with TLS and at rest with AES‑256.

SSO and access control

Enterprise SSO supports SAML 2.0 and OIDC, with just‑in‑time provisioning. This lets your identity team manage access through its existing provider.

Private studies and deletion controls

We log relevant access events. You can delete a study and its stored materials from the service.

The life of a case file

This overview shows the main stages of how a case file is handled, from upload through deletion.

Upload

Files are sent over TLS to private cloud storage.

Storage

Stored materials are encrypted with AES‑256 and scoped to your workspace.

Simulation

When you run a panel, relevant materials are sent to AI providers under zero‑data‑retention terms. We do not use customer data to train or fine‑tune models.

Results

Results sit behind workspace access controls. Enterprise customers can use SSO, and we log relevant access events.

Deletion

You can delete a study and its stored materials from the service. AI providers are covered by zero‑data‑retention terms.

Information for your security review

Our team can share documentation and respond to questions about our controls.

Start at trust.viewpoints.ai or write to [email protected].

  • SOC 2 Type II report. The current audit report, shared under NDA through the trust center.
  • Security questionnaires. Send us your questionnaire and we will route it to the right team.
  • SSO documentation. Setup guides are available for SAML 2.0 and OIDC identity providers.

FAQ

Is our data used to train AI models?

No. Viewpoints.ai does not use case files, prompts, or results to train or fine‑tune models. Our contracts also prohibit our AI providers from using that data for training or fine‑tuning.

What does zero data retention mean in practice?

Under our agreements, AI providers may process the data needed to answer a request but are not permitted to retain that data after processing.

Who can see our case materials?

Case materials are limited to authorized users in your workspace. Our access to production systems is restricted and logged under our SOC 2 Type II controls.

Do you support single sign-on?

Yes. Enterprise SSO supports SAML 2.0 and OIDC identity providers, with just‑in‑time provisioning.

What happens when we delete a study?

You can delete a study and its stored materials from the service. The AI providers we use are covered by zero‑data‑retention terms.

How do we get your SOC 2 report or a completed security questionnaire?

Request our current SOC 2 Type II report at trust.viewpoints.ai. It is available under NDA. Send security questionnaires to [email protected] and our team will respond.

Need more security information?

Visit the trust center to request the report, or send us your questionnaire. We can also answer security questions during a demo call.