> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cassidyai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security overview

> Cassidy is built for enterprise use. Here's how we keep your data secure.

Cassidy is built for teams that care about where their data goes. Your data is encrypted, isolated, and never used to train AI models.

## At a glance

|                       |                                                                                          |
| --------------------- | ---------------------------------------------------------------------------------------- |
| **No model training** | Your data is never used to train AI models. Zero-training agreements with all providers. |
| **Encryption**        | All data encrypted in transit and at rest.                                               |
| **SOC 2 Type II**     | Independently audited, continuously monitored.                                           |
| **HIPAA**             | BAAs available for organizations handling PHI.                                           |
| **GDPR**              | DPAs available. Full data subject rights supported.                                      |
| **Data isolation**    | Row-level security separates organizations at the database level.                        |

## Learn more

<CardGroup cols={2}>
  <Card title="Compliance" icon="certificate" href="/security/compliance-overview">
    SOC 2 Type II, HIPAA, GDPR, CCPA, and CASA status.
  </Card>

  <Card title="Trust center" icon="shield-check" href="/security/trust-center">
    Real-time compliance status and downloadable reports.
  </Card>

  <Card title="Enterprise security features" icon="building-shield" href="/security/enterprise-readiness">
    SSO, role-based access, data retention, and usage monitoring.
  </Card>
</CardGroup>