ENTERPRISE SECURITY

Security for Sustainability Data and AI at at GLYNT.AI

GLYNT.AI is built with multiple layers of sustainability data security to protect your data. We’re SOC 2 (Type II) and SOC 1 (Type II) compliant, with segmented data and AI.

How We Protect Your Data

The controls enterprise buyers ask about

GLYNT.AI is an enterprise-grade system, with end-to-end security, from source file capture to data delivery.

SOC 1 & SOC 2 Type II certified

Independently audited annually — the same control standards used by SOX-compliant financial systems and enterprise software companies.

Data isolation by design

Every customer operates in a separate, segmented tenancy. GLYNT.AI never shares data or AI models across customers.

Encryption in transit and at rest

All customer data is encrypted end-to-end, using industry-standard protocols at every stage.

Full chain of custody & audit trails

Every file and data point is fully traceable, with complete reporting.

A different kind of AI protects your data

GLYNT.AI’s Few Shot machine learning system is a system of tiny models, fully segmented and transparent.

Segmented AI

GLYNT.AI uses a separate library of AI models for each customer. No data or model sharing.

Fit-for-purpose AI

Our specialized AI was built to process sustainability data. It can’t do anything else.

Traceable AI

Check the data delivered against the source file. No black box.

Human review

Complex data issues are escalated, and every delivery gets a final human review.

Learn more about GLYNT.AI’s AI

FAQs

Frequently asked security questions

Browse this Q&A for an overview of GLYNT.AI’s security practices.

Does GLYNT.AI maintain security compliance certifications?

GLYNT.AI is SOC 1 (Type II) and SOC 2 (Type II) compliant, and has undergone third-party compliance audits for five consecutive years.

Where is GLYNT.AI's customer data physically stored?

GLYNT.AI’s infrastructure runs on AWS, with servers located in separate U.S. regions and rollover capabilities to additional AWS locations for redundancy.

How does GLYNT.AI encrypt customer data?

Customer data is encrypted at rest using 256-bit encryption and encrypted in transit — including over wireless networks — using TLS 1.3 standard encryption.

Is customer data segregated between different companies using GLYNT.AI?

Yes. GLYNT.AI uses a multi-tenant AI and database architecture specifically designed so that customer data and AI models are never co-mingled.

Does GLYNT.AI provide audit logs for tracking access to sensitive data?

Yes. Audit logs are part of GLYNT.AI’s security program, alongside firewalls, intrusion detection and prevention systems, and ongoing third-party network vulnerability monitoring and scanning.

How often does GLYNT.AI test for security vulnerabilities?

GLYNT.AI conducts third-party penetration testing every six months, in addition to ongoing automated and third-party vulnerability scanning and network monitoring.

What is GLYNT.AI's incident response process?

GLYNT.AI follows a formal incident management protocol covering issue identification, reporting, severity assignment, coordinated response and communication, verified resolution, and a root-cause post-mortem review.

What is GLYNT.AI's uptime guarantee?

GLYNT.AI’s SLA commits to 99.5% uptime, and GLYNT.AI exceeds this threshold in practice.

Does GLYNT.AI have a disaster recovery and business continuity plan?

Yes. GLYNT.AI maintains disaster recovery and business continuity plans across its key data locations, supporting recovery across multiple regions.

Does GLYNT.AI screen and train employees on security practices?

Yes. All employees and contractors undergo a background check at the time of hire, complete security training as new hires and annually thereafter, and sign both a non-disclosure agreement and an acceptable use policy.

Need a full Information Security (InfoSec) package for your procurement team?

Talk to a data expert

BACK TO PRODUCT