Security & trust

Security you can put in front of procurement.

We build for organizations that answer to security, legal, and IT. Here is what we protect, how we handle your content, and what you can request during review.

Where your content goesTLS 1.2+

Controls

The controls teams ask for.

Access, governance, and data handling, built into the platform rather than bolted on. Availability is stated per control so you can take this straight into a review.

ControlAvailability
Single sign-on (SSO/SAML)Centralized access through your own identity provider.Business
Role-based access controlWorkspace roles decide who can create, review, and publish.All plans
Audit-style governanceReview, approval, comments, and version history, a defensible record of who changed what.All plans
Encryption in transit & at restTLS on the wire; stored content encrypted at rest by our cloud providers.All plans
Data residency optionsDesigned to support regional hosting requirements.On request
Sub-processor listAI model providers, payment processors (Paddle, Razorpay), and cloud hosting.On request
Data Processing AgreementA DPA for organizations that need one for procurement.On request
Responsible disclosureReport a vulnerability and we'll work with you on a fix.All plans

What we offer today

Handled honestly, stated plainly.

We don't over-claim certifications. These are the controls available today; compliance documentation and current status are available on request.

  • Single sign-on (SSO) on Business
  • Role-based access control
  • Review, approval & version history
  • Encryption in transit and at rest
  • Designed to support SOC 2-aligned controls
  • Data Processing Agreement on request
  • Sub-processor list on request
  • Compliance documentation on request

Responsible disclosure

Report a vulnerability.

Security is a shared responsibility. If you've found an issue, we want to hear from you.

Email our security team

Send details of the issue, steps to reproduce, and your contact information to security@interlace.ai. Please give us reasonable time to investigate and respond before any public disclosure.

Bring security to the table early.

Tell us your requirements and we'll map Interlace's controls to your review process.