Security and compliance

Gan.AI is strongly committed to security compliance, as evidenced by its SOC 2 Type 2 certification. The platform ensures the protection of its cloud-hosted software application through a secure network environment hosted on Vercel, AWS, Render, and Azure across various regions. The use of a virtual private cloud (VPC) and accompanying firewalls restricts access to authorized points, while HTTPS encryption secures data during transmission. Policies and procedures are well-documented and include guidelines for managing technical vulnerabilities, disaster recovery, and incident response. In addition to robust infrastructure security, Gan.AI employs continuous monitoring systems, such as Sprinto, to track and report the health of its information security program. Staff members undergo regular security awareness training to stay informed about the latest security practices and threats. The company maintains rigorous access control and data encryption practices to protect sensitive information. By integrating these comprehensive security measures, Gan.AI ensures a secure environment for its clients' data, reinforcing its commitment to maintaining high standards of security and compliance.