Audited controls, privacy compliance across regions, and enterprise-grade infrastructure — so you can build on Zhen AI with confidence.
Independent audit of our Security, Availability and Confidentiality controls over a review period.
Certified information security management system (ISMS).
Certified AI management system — governance for how we build and operate AI.
EU General Data Protection Regulation, with a Data Processing Addendum and SCCs.
Japan's Act on the Protection of Personal Information.
China's Personal Information Protection Law.
HIPAA Security Rule assessment completed; Business Associate Agreements available.
Card payments are handled by Stripe, a PCI-DSS Level 1 service provider.
Audit reports, certificates, DPAs and BAAs are available under NDA — contact [email protected].
TLS 1.2+ for data in transit and AES-256 for data at rest.
Role-scoped access, per-tenant isolation, and audit-ready request logging.
Org → team → key hierarchy with per-key quotas and model allow-lists.
Automatic failover across upstreams, rate limiting, and edge delivery.
Third parties that may process data on our behalf, disclosed for transparency: