Trust & Security
Built for decisions that have to stand up to scrutiny.
A governed platform you run on your own infrastructure, with your own models. Not another point tool. Not a black-box agent.
Trusted & certified
Trusted by enterprises. Certified to the standards they expect.
Security and compliance are audited, not assumed. Cogniquest is certified for SOC 2, ISO 27001, HIPAA and GDPR.
Your data never trains our models.
Trusted by
Certified
-
SOC 2 Independently audited security controls, verified by an external auditor. -
ISO 27001 A certified information security management system, across the organization. -
HIPAA Safeguards for protected health information in healthcare workflows. -
GDPR Personal data handled to European data-protection standards.
Your data stays yours
Your data never trains our models
Customer data is never used to train models for anyone else. Any learning stays within your own deployment.
Ring-fenced deployment
Run Cogniquest inside your own environment, on-premises or in your private cloud, so documents never leave your perimeter.
Encrypted in transit and at rest
Data is encrypted wherever it moves and wherever it is stored.
Deploy your way
Bring your own LLM, frontier or open, and keep it inside your perimeter.
- 01SaaSManaged by Cogniquest, ready to use.
- 02Private cloudRing-fenced in your cloud tenant, on any major cloud.
- 03On-premisesInside your own data center, for the strictest data-residency needs.
Governed throughout
Who may see it, who may do it, who must approve it and what it may spend: decided once at platform level and enforced in every product, workflow, agent and endpoint.
- Role-based access control
- SSO / OAuth 2.0
- Tenancy & isolation
- Maker–checker
- Separation of duties
- Acting on behalf of
- Spend control
- Full audit export
Assured, not just confident
Grounded and cited
No answer without support, and every value traced to the page it came from.
A record for every decision
Reasons, evidence, policy, confidence and action, with the reviewer, timestamp and model version captured.
Tested before it's live
Every workflow and agent is dry-run end to end before it touches a live system.
Need our security documentation or a completed questionnaire? Write to info@cogniquest.ai.
Is Cogniquest SOC 2 and ISO 27001 certified?
Yes. Cogniquest is certified for SOC 2, ISO 27001, HIPAA and GDPR. For security documentation or a completed questionnaire, write to info@cogniquest.ai.
Is our data used to train AI models?
No. Customer data is never used to train models for anyone else, and any learning stays within your own deployment. Data is encrypted in transit and at rest.
Can Cogniquest run on-premises or in our private cloud?
Yes. Choose SaaS managed by Cogniquest, a private cloud deployment ring-fenced in your cloud tenant on any major cloud, or on-premises inside your own data center for the strictest data-residency needs. Ring-fenced deployments keep documents inside your perimeter.
Can we use our own LLM?
Yes. Bring your own LLM, frontier or open, and keep it inside your perimeter.
How is access controlled?
Access is decided once at platform level and enforced in every product, workflow, agent and endpoint: who may see it, do it, approve it and what it may spend. Controls include role-based access, SSO and OAuth 2.0, tenancy and isolation, maker–checker, separation of duties, spend control and full audit export.
Can every AI decision be audited?
Yes. Every decision carries a record of its reasons, evidence, the policy applied, confidence and the action taken, with the reviewer, timestamp and model version captured. Every value traces back to the page it came from, and every workflow and agent is dry-run before it touches a live system.