elvex Trust Center

Security you can verify, not just trust.

SOC2 Type2 and HIPAA reports on request, every control continuously monitored, and the policies and subprocessor detail your security team needs to say yes.

NYT
Stacker
Graham media group
McClatchy
Code and Theory
1kosmos
Hallmark
NTB
The Boston Globe
Movable Ink
Automatic
Embark
Horizon Organic
Your data is never used to train AI models.
Prompts and content sent to integrated model providers are processed for your request only — never retained or used for training. Documented in our SOC2 System Description.
Four circular icons with abstract logos arranged horizontally on a white background.
Compliance reports
SOC 2 Type 2 Report
Johanson Group LLP · Feb 10 – May 10, 2025
Request
HIPAA Report
PHI safeguards · attestation
Request
Continuous monitoring

Controls, monitored around the clock.

App Security

Code-reviewed on every release

  • Annual Penetration Tests

  • Responsible Disclosure Program

  • Code Review Process

  • Vulnerability Management

  • Web Application Firewall

  • Quarterly Vulnerability Scan

  • Secure SDLC Policy

  • Customer Disclosure Process

  • Employee Disclosure Process

Data Security

Encrypted in and out transit

  • Encryption at Rest (AES-256 / KMS)

  • SSL/TLS Enforced

  • Daily Database Backups

  • Recovery: RPO 1 hour · RTO 4 hours

  • Annual Risk Assessment

  • Annual Access Control Review

  • Annual Incident Response Test

  • Audit Log Review

  • Security Policies

Infrastructure Security

Resilient cloud, isolated and auto-patched.

  • No Corporate Network or VPN (Zero-Trust)

  • Cloud Data Storage Restricted

  • Multiple Availability Zones

  • Password Policy

  • Security Patches Auto-Applied

Network Security

A locked-down perimeter

  • Firewalls

  • SSH Restricted to Authorized IPs

  • Logging / Monitoring

  • Malware Detection Installed

  • Unique Accounts Used

Organization Security

A security-first team

  • Security Training

  • Employee Background Checks

  • Cybersecurity Insurance

  • Code of Conduct

  • Incident Response Plan

  • Incident Response Team

  • Disaster Recovery Plan

  • Acceptable Use Policy

Product Security

Secure by default

  • MFA on Accounts

  • Hard-Disk Encryption

  • Servers Monitored & Alarmed

  • Databases Monitored & Alarmed

  • Messaging Queues Monitored

  • NoSQL DB Monitored & Alarmed

Policies

  • Breach Notification Policy

  • Data Protection Policy

  • Data Classification Policy

  • System Access Control Policy

  • Encryption Policy

  • Business Continuity Policy

  • Data Retention & Disposal Policy

  • Change Management Policy

  • Software Development Lifecycle Policy

  • Disaster Recovery Policy

elvex HIPAA compliant AI platformSoc 2 Type 2 certified badgeelvex ai platform G2 review
It has become something I use daily and count on in my work life. It has helped me find answers and accomplish tasks faster.
Justin Winegar
Media Analytics Manager, McClatchy
We had thousands upon thousands of open-ended responses to analyze. The ability to upload a spreadsheet and use SQL within elvex has been incredibly helpful.
Kat Sheplavy
Senior Director of New Products and Experiences at McClatchy
Having elvex has made GenAI so much easier to work with—I spend less time building good prompts and more time interacting with the apps I’ve built to get what I need.
Jarrett Ferguson
Manager, Business Transformation, Embark
I was trying to figure out how to do a vlookup again as I hadn't done one in forever and it literally walked me step by step through the process.
Marisa Goldsmith Brice
Strategic Sourcing Analyst, McClatchy
It has become something I use daily and count on in my work life. It has helped me find answers and accomplish tasks faster.
Justin Winegar
Media Analytics Manager, McClatchy
We had thousands upon thousands of open-ended responses to analyze. The ability to upload a spreadsheet and use SQL within elvex has been incredibly helpful.
Kat Sheplavy
Senior Director of New Products and Experiences at McClatchy
Having elvex has made GenAI so much easier to work with—I spend less time building good prompts and more time interacting with the apps I’ve built to get what I need.
Jarrett Ferguson
Manager, Business Transformation, Embark
I was trying to figure out how to do a vlookup again as I hadn't done one in forever and it literally walked me step by step through the process.
Marisa Goldsmith Brice
Strategic Sourcing Analyst, McClatchy
It has become something I use daily and count on in my work life. It has helped me find answers and accomplish tasks faster.
Justin Winegar
Media Analytics Manager, McClatchy
We had thousands upon thousands of open-ended responses to analyze. The ability to upload a spreadsheet and use SQL within elvex has been incredibly helpful.
Kat Sheplavy
Senior Director of New Products and Experiences at McClatchy
Having elvex has made GenAI so much easier to work with—I spend less time building good prompts and more time interacting with the apps I’ve built to get what I need.
Jarrett Ferguson
Manager, Business Transformation, Embark
I was trying to figure out how to do a vlookup again as I hadn't done one in forever and it literally walked me step by step through the process.
Marisa Goldsmith Brice
Strategic Sourcing Analyst, McClatchy

Subprocessors

aws logo

Amazon Web Services

Cloud infrastructure — compute, storage, KMS
USA
cloudflare logo

Cloudflare

DNS & edge network
USA

AI Model Providers

OpenAI, Anthropic, Cohere, inference, never trained on your data
USA
unified logo

Unified

Integration-as-a- service provider
USA
daytona logo

Daytona

Hosted sandboxes for remote code execution from elvex/LLMs
USA
twilio logo

‍Twilio / SendGrid

Transactional email (invites, login)
USA
auth0 logo

Auth0 (Okta)

Hosted authentication provider
USA
google logo

Google Workspace

Email, docs & collaboration
USA
vercel logo

Vercel

Application hosting
USA
sentry logo

Sentry

Bug tracking and application performance monitoring (APM).
Germany, USA

Transform your workflows today

Learn how we can help you modernize your business.

Get a demoView trust center