Trust Center
Measures and their status.
What is live today is listed as live. What is still coming, we call that, without dressing it up.
| Measure | What it means | Status |
|---|---|---|
| EU storage | Storage in Stockholm, processing in Frankfurt. | Live |
| Encryption in transit | TLS on every connection. | Live |
| Private storage | No public links, one-time upload links per file. | Live |
| Supplier certifications | Our infrastructure runs at suppliers with ISO/IEC 27001:2022 and SOC 2 Type 2. Navabi itself is not certified. | Live |
| Two-factor authentication | Logging in with a second factor. | In development |
| Single sign-on | Logging in with your work Google or Microsoft account. | In development |
| Roles and permissions | Deciding per employee who sees which matters and documents. | In development |
| Audit trail | Recording per matter who did what, including what the AI did. | In development |
| Key per client | Encryption at rest with a separate key per client. | In development |
| Isolated processing | Each matter is processed in its own secured environment. | In development |
| Penetration test | An independent test of the portal before it opens widely. | Planned |
| Isolation per client | Every database row carries your client ID, enforced with row level security. Every tool call is limited to one matter. No shared caches or search indexes between clients. | In development |
| Key per client | Documents encrypted per document, with a separate key per client in a European key management service (KMS). | In development |
| Deletion that really deletes | After cancellation you have thirty days to export everything. Then we destroy your key, which makes backups unreadable too. | In development |
| Isolated ingestion | Files are opened in an isolated environment without network access, so a malicious file cannot reach anything. | In development |
| Model providers | Only through EU regions, without retention and without training on your data. Sensitive matters run entirely on models we host ourselves. | In development |
| Immutable audit log | Append only, a hash chain per client and a qualified timestamp every day. See what a line looks like. | In development |
Continuity
If something goes down.
Here too: what is there today, and what we are building.
| Component | What it means | Status |
|---|---|---|
| Status page | Live checks of website, intake, database and storage. View the status. | Live |
| Export | Export your documents and your company profile, at any time. | In development |
| Backups with restore test | Daily backups, and regular tests that restoring actually works. | In development |
| Contingency plan | How we keep working if a supplier or a model goes down. | In development |
Found something here that is not right? Report a vulnerability. We confirm within one business day.