Trust center
How TriagoAI keeps your environment safe
AI that changes production systems is a serious thing. Here's exactly how we keep it controlled, auditable, and explainable.
Security posture
Controls designed against SOC 2 / ISO 27001
Least-privilege role-based access control, scrypt password hashing, signed HttpOnly sessions, login throttling, a tamper-evident audit chain, and per-tenant data isolation are in place and mapped to the SOC 2 and ISO 27001 control families. Third-party credentials (integration keys, SSH keys) are held server-side and scoped to a single tenant. SSH keys, RMM/PSA client secrets, and BYOM API keys are encrypted at rest with AES-256-GCM; webhook verification secrets are not yet encrypted at rest.
Formal certification is a future step
TriagoAI is not currently SOC 2 or ISO 27001 certified. A SOC 2 Type I self-assessment is in progress; certification is planned and will be published here. We do not claim a certification we don't hold.
AI safety
Human approval on every destructive action
The Remediation agent never changes your infrastructure without an approved plan. Regulated packs enforce dual approval (two distinct approvers) for high-risk changes.
Tamper-evident SHA-256 audit chain
Every mutation - human or agent - writes an event whose hash chains to the previous one. Retroactive edits break the chain and are instantly detectable. Always on.
Self-critique verifier
AI outputs pass through a built-in self-critique step before they are acted on, catching unsafe or incoherent responses before they touch your environment.
Local AI mode (Ollama)
For tenants that can't let data leave the network, agents can run against a self-hosted Ollama model - no third-party LLM call, nothing leaves your box.
Data & privacy
AI providers
In external mode we call DeepSeek (directly or via OpenRouter) and OpenRouter. We send only the minimum text needed for a task.
Local-only option
Tenants can run agents against a self-hosted Ollama model. In local mode, no request leaves your infrastructure.
Data residency
Data residency is set per tenant (default: EU-central). See the privacy policy for the full data-processing statement.
Compliance documents
Additional artifacts - security policies, audit-log schema, vendor-risk register, and penetration-test plan - are available on request.
SOC 2 status
SOC 2 Type I self-assessment in progress. TriagoAI is not yet certified; this page will publish the report when it is available. We are happy to share our current security posture and answer a vendor security questionnaire today.