Security & Privacy
Our security practices, data handling, and compliance certifications.
4 min read5,100 viewsUpdated 2026-02-09
Encryption
All data is encrypted at rest and in transit:
| Layer | Method |
|---|---|
| At rest | AES-256 |
| In transit | TLS 1.3 |
| Database | Per-workspace encryption keys |
| Backups | AES-256, stored in separate region |
Agent conversations and task data are stored in isolated, encrypted databases per workspace. No cross-workspace data access is possible.
Compliance
Where Botonom stands on compliance today:
- 🔄 GDPR / KVKK - alignment program in progress (EU-based data processing)
- 🔜 SOC 2 Type II - on our certification roadmap
- 🔜 ISO 27001 - on our certification roadmap
Data processing agreements (DPAs) are available for enterprise customers.
Questions about our compliance roadmap or a DPA? Contact security@botonom.com.
securityprivacycompliance
Was this helpful?
More questions? Contact support