This page summarizes AltitudeIQ's security and compliance posture. For information on how we handle personal information, see our Privacy Policy.
Compliance Posture
AltitudeIQ operates in alignment with the SOC 2 Trust Services Criteria. AltitudeIQ has completed a SOC 2 Type I examination and is pursuing a SOC 2 Type II examination. The SOC 2 Type I report is available on request under NDA.
Where applicable, AltitudeIQ enters into Business Associate Agreements with HIPAA-regulated customers. AltitudeIQ is not a system of record. Customers retain regulatory validation responsibility for activities conducted in their environments.
Data Handling
Commitments on the handling of customer data are set out in each customer's agreements. Customer data is not used to train models for other customers.
Incident Response
AltitudeIQ maintains a documented incident response process. Breach notification is governed by each customer's agreements and applicable law.
Vulnerability Disclosure
To report a suspected security vulnerability, email security@altitudeiq.ai. Please do not include Protected Health Information, customer data, or production credentials in vulnerability reports.
Scope and Limitations
This page describes AltitudeIQ's compliance posture as of its most recent update and does not constitute legal advice, contractual commitment, or warranty. Specific commitments to a customer are governed by that customer's executed agreements.
Contact
For compliance and procurement diligence requests: