SOC 2 & ISO 27001
An independently audited security program: documented controls, monitoring and incident response.
Security & Compliance
Your data stays yours
Kuyil is built for regulated, enterprise environments: SOC 2 and ISO 27001 posture, GDPR alignment, HIPAA-ready deployments, tenant isolation, encryption everywhere and configurable retention.
Security and compliance
Encryption everywhere
Data encrypted in transit and at rest, with strict key management.
Tenant isolation
Your knowledge and conversations are isolated per tenant — never shared across customers.
Configurable retention
You decide what is stored and for how long, with reliable deletion on request.
Audit trails
Full logging of access and activity, so every interaction can be reviewed.
HIPAA-ready
For US healthcare, we sign BAAs and isolate, encrypt and log protected health information.
Need our SOC 2 report, DPA or a security questionnaire completed? Get in touch.
FAQ
Frequently asked questions
Kuyil maintains a SOC 2 and ISO 27001 security posture with documented controls, monitoring, incident response and independent audits, including regular penetration testing. Reports are available on request.
For US healthcare, Kuyil is HIPAA-ready: we sign Business Associate Agreements and isolate, encrypt and log protected health information. Kuyil is configured to non-clinical scope and declines clinical questions.
Data is isolated per tenant and can be deployed in-region (US, EU, India, etc.) or fully on-premise to meet residency and sovereignty requirements.
Retention is configurable per deployment. You decide what is stored and for how long, with scheduled auto-purge and reliable deletion on request.
Data is encrypted both in transit and at rest, with strict key management.
No. Your conversations and content are never used to train public AI models. Your data is yours.
Yes. For agencies and enterprises with strict requirements, Kuyil supports fully on-premise deployment, including the models, with no external dependencies.
SSO via OIDC/SAML for admins, with role-based access — admin, content editor, viewer and auditor — and granular permissions for content changes and analytics.
Yes. Kuyil is GDPR- and CCPA-aligned, with configurable consent flows and support for subject-access and erasure requests via the admin dashboard.
Yes. We provide SOC 2 reports, ISO 27001 documentation, a DPA and completed security questionnaires on request.
Hear Kuyil for yourself
A live, fifteen-minute conversation with your future front desk. Bring your hardest question — in any language.
Request a Demo