Certification Status
YourAI (operated by Melade, Inc.) achieved SOC 2 Type I certification in 2025. Our audit was conducted by an independent AICPA-accredited firm covering the Security and Confidentiality trust service criteria.
What SOC 2 Means for You
SOC 2 is the gold standard for SaaS security. Think of it like a building inspection — except instead of checking wiring and plumbing, an independent auditor verifies that our systems, processes, and controls actually protect your data the way we say they do.
Security
Data encrypted at rest (AES-256) and in transit (TLS 1.3). AWS KMS per-organization encryption keys. No shared tenancy.
Confidentiality
Zero data retention on AI provider APIs. Your prompts and documents never train third-party models. Row-level security isolates every organization.
Availability
AWS-native infrastructure across multiple availability zones. Aurora PostgreSQL with automated failover. 99.9% uptime SLA target.
Audit Trail
Every action logged with immutable, append-only audit records. 6-year retention. Tamper-proof via S3 Object Lock (WORM compliance).
Trust Service Criteria Covered
| Criteria | Category | Status |
|---|---|---|
| CC1–CC5 | Common Criteria (Security) | ✓ Passed |
| C1 | Confidentiality | ✓ Passed |
| A1 | Availability | ✓ Passed |
| PI1 | Processing Integrity | Type II (In Progress) |
| P1 | Privacy | Type II (In Progress) |
Request the Full Report
SOC 2 reports are shared under NDA with prospective customers and partners. Contact us to request access to our full audit report.