Security overview

Cassidy is built for teams that care about where their data goes. Your data is encrypted, isolated, and never used to train AI models.

At a glance


No model training	Your data is never used to train AI models. Zero-training agreements with all providers.
Encryption	All data encrypted in transit and at rest.
SOC 2 Type II	Independently audited, continuously monitored.
HIPAA	BAAs available for organizations handling PHI.
GDPR	DPAs available. Full data subject rights supported.
Data isolation	Row-level security separates organizations at the database level.

SOC 2 Type II, HIPAA, GDPR, CCPA, and CASA status.

Real-time compliance status and downloadable reports.

SSO, role-based access, data retention, and usage monitoring.