Your data, protected by uncompromising infrastructure.
We handle your highest-stakes business documents with enterprise-grade security. Every process, server, and workflow is designed to maintain absolute confidentiality, privacy, and zero data retention.
Hardened for Global Compliance
SOC 2 TYPE II COMPLIANT
We enforce strict operational access controls and security integrity self-modeled and continuously monitored against SOC 2 Type II trust principles.
ISO 27001 FRAMEWORK
Our internal procedures, operational storage policies, and workflows are structured and tracked to self-align with ISO 27001 information security standards.
GDPR & CPRA COMPLIANT
We operate under self-compliant GDPR, California CPRA, and India's DPDP Act standards, ensuring user privacy and zero retention of document text.
Enterprise Compliance & Data Security Standard
Our Data Processing Agreement (DPA) provides comprehensive data protection guarantees (DPA v2.1) and is incorporated automatically into our standard Terms of Service. Review the full terms or execute a custom procurement agreement:
1. Controller & Processor Roles
Erayaha acts as the Data Processor processing document data solely on documented instructions from Customer (the Data Controller), while acting as Controller for account identities and billing telemetry.
2. Security Standards & Technical Measures
All data is protected with TLS 1.3 in transit and AES-256 at rest. All document reasoning takes place transiently in volatile RAM memory with immediate purge upon inference completion.
3. Subprocessor Governance & Advance Notice
We maintain a streamlined roster of audited infrastructure subprocessors (Cloudflare, AWS Bedrock, Google Cloud/Firebase, Microsoft Graph) and provide 30 days’ advance written notice before onboarding any new subprocessor.
4. International Transfers (EU SCCs & UK Addendum)
Cross-border data flows are safeguarded by the European Commission’s Standard Contractual Clauses (EU SCCs 2021/914) and the UK International Data Transfer Addendum.
5. Connected-Storage Architecture
Document storage remains entirely within your enterprise OneDrive, SharePoint, or Google Drive environment, guaranteeing zero document retention on Erayaha servers.