System: Healthy
Your data is never used to train models. Every action is logged, attributed, and reversible. Automation you control — not automation that controls you.
All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Infrastructure is SOC 2 Type II compliant with full tenant isolation — no data is shared across workspaces. US and EU data residency options are available on Enterprise plans.
Fine-grained role-based access control (RBAC) applies to every module, action, and dataset. SSO/SAML is supported on Enterprise plans. Multi-factor authentication is enforced for all accounts. API keys are scoped to specific permissions and can be rotated or revoked instantly.
Every automation runs under your defined policy constraints. You set spend caps, margin floors, rate limits, and approval thresholds. Actions above threshold require explicit operator approval — nothing automated exceeds its boundaries without human sign-off. Policies are configurable per module, per automation, and per workspace.
Every action — who triggered it, what policy allowed it, what data was used, what the outcome was — is recorded in an immutable, time-stamped audit ledger. Exportable as PDF, CSV, or via API for compliance and reporting. Complies with GDPR, CCPA, and SOC 2 audit requirements.
Where technically reversible, automated actions can be rolled back from the audit trail. Spend campaigns can be paused, sequences stopped, and records reverted. For irreversible actions, the full audit record supports rapid remediation. Incident SLAs are tiered by plan: 99.9% uptime (Growth) and 99.99% (Enterprise).
Every AI decision includes an explanation — what data was used, what policy governed the action, and why the OS chose that path. Your data is never used to train any model. All inference runs in isolated, per-tenant environments with no cross-tenant data access.
SOC 2 Type II
Certified. Annual third-party audit of security, availability, and confidentiality controls.
GDPR
Compliant. DPA available. Right to erasure and data portability supported.
CCPA
Compliant for California-based businesses.
HIPAA-eligible
Enterprise plans available for healthcare use cases. BAA available on request.
CMEK
Customer-managed encryption keys available on Enterprise plans.
Security and control are not features — they are foundations. See how Profitalize keeps every automated action visible, bounded, and reversible.