Proton.ai Logo

Trust Center

Start your security review
View & download sensitive information
ControlK

Overview

Proton builds agentic AI software for B2B distributors. Our customers trust us with the data that runs their business, so security, confidentiality, and availability are built into how we design and run the platform.

We're SOC 2 Type II certified, host on Google Cloud, encrypt customer data at rest and in transit, keep each customer's data logically separated, and run quarterly vulnerability scans plus annual third-party penetration tests. Below you'll find our controls, certifications, subprocessors and AI model providers, and the documents a security review typically asks for.

  • R.S. Hughes Co.
  • Vallen
  • Dakota Riggers
  • Building Products Inc
  • Midwest Wheel
  • Benco Dental
  • MSC
  • Purity Life Health Products
  • Chattanooga Shooting
  • Replenex
  • Swish Maintenance
  • Richards Supply

Documents

Featured Documents

COMPLIANCESOC 2 Type 2

Product Security

We pay great attention to enterprise features such as access control and single sign on. We are happy to provide more details about our enterprise features upon request.

Data Security

We follow industry best practices for data security. We are happy to provide more details about our data security practices upon request.

AI

We take the usage of AI seriously in our organization and work to ensure security and reliability of the AI.

Data Privacy

Privacy of customer data is top of mind. We follow industry best practices and follow all applicable privacy regulations.

Access Control

Access is tightly monitored and controlled at our company. We are happy to provide more details about our access control practices upon request.

Infrastructure

We take great care to work with best-in-class infrastructure providers that provide secure computing and storage. We are happy to provide more details about our infrastructure upon request.

Endpoint Security

We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.

Network Security

We protect our corporate network against external & internal threats.

Corporate Security

We implement internal measures and practices to maintain a high standard of security.

Incident Response

We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.

Risk Management

We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.

Asset Management

We have strict asset management policies in place to ensure that all assets are accounted for and secure.

BC/DR

We have a business continuity plan in place to ensure that we can continue to operate in the event of a disaster.

Training

We provide security awareness training to all employees to ensure that they are aware of security best practices.

Change Management

We have a change and configuration management process in place to ensure that changes are properly reviewed and approved.

Continuous Monitoring

We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.

Subprocessors

If you think you may have discovered a vulnerability, please send us a note.
Report issue
Built onSafeBase by Drata Logo