anyquest.

Engineered
for trust.

AnyQuest was designed to protect the privacy of your users and put you in control of your data and intellectual property.

See the controls
AnyQuest · AWS-hosted Model providers Encrypted in transit Your isolated workspace Encrypted at restEvery operation loggedYou set retention Your peopleSSO and roles Bound not to train on your data

SOC 2 Type 1.
Independently examined against the AICPA Security criteria.

The controls

Your access rules. Your data.
Security in every change.

01 / Access

Control who has access.

  • ↗Your team has SSO, role-based permissions, and isolated workspaces.
  • ↗Access is based on role and least privilege, and approved before it is granted.
  • ↗Multi-factor authentication is required for privileged access.
  • ↗Access is reviewed at least twice a year and removed when someone leaves or changes role.
02 / Data

Your data remains yours.

  • ↗Your data is used to deliver your results, never to train AI models.
  • ↗Every model provider we use is contractually bound not to train on customer data.
  • ↗Your data is encrypted in transit and at rest.
  • ↗You set retention. When your agreement ends, your data is returned or deleted.
  • ↗Production and test environments are separated, and customer data is not used in testing.
03 / Change

Security is part of every change.

  • ↗Every operation is logged and auditable.
  • ↗We review and approve changes before release, and they must pass automated checks first.
  • ↗We prioritize vulnerabilities by severity and address them within target timeframes, or formally accept the risk.
  • ↗We formally assess security risks at least annually and when significant changes occur.
AWS-hosted SaaS. Nothing new for IT to build or host.

Operations

Ready to respond and recover.

Incidents and recovery

A documented process, reviewed annually.

Our incident-response process covers detection, containment, recovery and review. We maintain backups and test recovery.

Vendors

Security extends to our vendors.

We assess vendors for risk before engagement and review them at least annually. Our contracts with data-handling vendors include terms for confidentiality, security, breach notification, and data return or deletion.

For your security review

Request the SOC 2 report.

The report is restricted-use and available by request, subject to its distribution terms.

See AnyQuest at work.

Tell us where to reach you.