Security
By amaise1 author41 articles
- Where are documents processed by AI?AI processing at amaise is strictly regional — data does not leave the assigned geographic zone:
- Which AI models and providers does amaise use?
- How is the AI pipeline isolated from the rest of the application?
- What happens if the AI service is unavailable?
- How is the traceability of AI results ensured?amaise ensures complete traceability of all AI-generated results through multiple mechanisms:
- How are AI hallucinations detected and prevented?
- Is there human oversight of AI decisions?
- Are customer data used to train AI models?**By default, no** — your documents and case data are not used to train, fine-tune, or improve any AI model, whether operated by amaise or a subprocessor.
- How does the document processing pipeline work?Documents go through a defined pipeline with multiple stages at amaise:
- How does amaise protect against prompt injection attacks?
- What does the CI/CD security pipeline look like?
- Can customers conduct their own penetration tests?
- How are dependencies checked for vulnerabilities?
- How is input validation ensured?amaise validates inputs on multiple levels:
- How does amaise protect against the OWASP Top 10?
- What does the secure software development process look like?
- Which security headers does amaise use?
- Which static code analyses are performed?
- How is supply chain security ensured?
- How are vulnerabilities prioritized and resolved?
- How are API keys secured at amaise?
- How does amaise protect against brute force attacks?
- Can customers connect their own identity providers?
- How is employee access managed?
- How does machine-to-machine authentication work?
- How does multi-factor authentication work in amaise?
- What roles and permissions are available in amaise?
- Does amaise support Single Sign-On (SSO)?
- How are access tokens managed and protected?
- How are WebSocket connections secured?
- How is compliance continuously monitored?
- Can customers audit amaise’s security controls?
- What is amaise’s position on the EU AI Act?
- How does amaise meet international data protection requirements?
- Which industry-specific frameworks does amaise comply with?
- What certifications does amaise have?
- How often are penetration tests conducted?
- How does responsible vulnerability disclosure work?
- What does amaise’s SOC 2 report cover?
- How does amaise meet data protection requirements (GDPR, nDSG, US)?
- How can workspace access be restricted to specific IP addresses?amaise can restrict access to a workspace to a defined list of IP addresses and CIDR ranges (IP-Allowlist). All other access is rejected at the authentication layer.