Your data, protected by uncompromising infrastructure.
We handle your highest-stakes business documents with enterprise-grade security. Every process, server, and workflow is designed to maintain absolute confidentiality, privacy, and zero data retention.
Security & Standards
Hardened for Global Compliance
SOC 2 TYPE II COMPLIANT
We enforce strict operational access controls and security integrity self-modeled and continuously monitored against SOC 2 Type II trust principles.
ISO 27001 FRAMEWORK
Our internal procedures, operational storage policies, and workflows are structured and tracked to self-align with ISO 27001 information security standards.
GDPR & CPRA COMPLIANT
We operate under self-compliant GDPR, California CPRA, and India's DPDP Act standards, ensuring user privacy and zero retention of document text.
Data Processing Agreement
How We Process Document Data
This section outlines the baseline structure of our Data Processing Agreement (DPA) incorporated automatically into our standard Terms of Service:
1. Core Obligations
Erayaha acts as the Data Processor. We process personal data solely on documented instructions from the Client (the Data Controller) and only to the extent necessary to deliver document reasoning features.
2. Security Standards
All data is encrypted in transit and at rest using AES-256 standard encryption. We enforce multi-factor authentication, carry out automated hourly backup syncs, and conduct continuous vulnerability scanning across all repositories.
3. Subprocessors
We work with trusted, highly secured infrastructure providers (such as Vercel and Google Cloud Platform) with rigorous SOC 2 alignments. We provide 30 days’ advance notice before adding or replacing any subprocessors.
4. Data Sovereignty & VPC Deployments
For enterprise customers requiring absolute compliance or sovereign hosting, we support full private sandbox or VPC installations within your AWS or GCP parameters. In this mode, no third-party subprocessors ever touch your raw documents or confidential contract data.
5. Connected-Storage CLM Guarantee
We ensure that all CLM document analysis storage remains entirely within your client-side OneDrive, SharePoint, or Google Drive environment. Erayaha.AI retains zero customer document data or analysis text on our servers, holding only basic, non-PII metadata for usage tracking to completely eliminate data-retention and third-party storage risks.