mysoc.ai operates an AI-powered security operations platform, and protecting our customers' data is our highest priority. The practices below summarize how we secure the Services. See our Privacy Policy for our data processing terms. Use SiemCore as your primary SIEM or connect mysoc.ai to an existing SIEM; the security review should cover the data flow and deployment you choose.
Encryption
Data is encrypted in transit using TLS and encrypted at rest using industry-standard algorithms.
Access Control
Role-based access control and least-privilege principles limit who can access systems and customer data. Administrative access requires strong authentication.
Monitoring & Logging
We continuously monitor our infrastructure and maintain audit logs to detect and respond to suspicious activity.
Secure Infrastructure
The Services run on reputable cloud providers with hardened configurations, network isolation, and regular patching.
Data Protection
Customer data is logically segregated, and access is restricted to authorized personnel for the purpose of operating the Services.
Vulnerability Management
We perform ongoing assessments and remediate identified vulnerabilities based on severity and risk.
AI Data Handling
Relevant alert details, log excerpts, and investigation context may be sent to the AI provider configured for your deployment. Cloud options include Anthropic, OpenAI, Google (Gemini), and OpenRouter under commercial API terms. Provider API keys are stored encrypted.
Model Training & Provider Retention
We do not authorize cloud model providers to use customer security data to train their models. Providers may retain inputs and outputs for a limited period for abuse monitoring under their own policies. The enabled provider and its retention terms should be reviewed for your deployment.
Customer Data Retention
Customer security data is retained according to your organization’s configuration and contract. Data is deleted or returned upon termination as provided in that agreement. Your security review should cover retention periods, deletion requirements, and any applicable legal obligations.
Deployment & Data Residency
Run mysoc.ai in our cloud or in your own environment. On-premises deployments can use a locally hosted model to keep AI processing within your network. If a cloud model is configured, relevant investigation context may leave that network. Confirm hosting and AI processing locations as part of deployment scoping.
Security review & documentation
Contact us to discuss your deployment architecture, tenant isolation, AI sub-processors, processing locations, retention requirements, and contractual commitments. For any certification or independent assessment, request its current status, scope, and available supporting documentation.
Contact the security teamResponsible Disclosure
We welcome reports from security researchers. If you believe you have found a vulnerability in our Services, please email security@mysoc.ai with steps to reproduce. Please give us a reasonable opportunity to investigate and remediate before public disclosure, and do not access or modify data that does not belong to you. We appreciate your help in keeping mysoc.ai and our customers safe.