Security
Security at Payman AI
Payman builds AI banking agents that execute real transactions inside banks and credit unions under bank-set policies and human approvals. This page summarizes our security practices. Full reports and attestations are in our Trust Center.
At a glance
- Compliance
- SOC 2 Type I & Type II
- Auditor
- Johanson Group
- AI training
- Customer data not used
- Cloud
- Google Cloud & Azure
Security controls
Encryption
- Datastores with sensitive customer data are encrypted at rest
- Data is encrypted in transit over public networks
- Portable media is encrypted
- Access to encryption keys is restricted
Access control
- Production access is restricted
- Unique account authentication
- Remote access to production requires MFA and an approved encrypted connection
- Network segmentation and firewalls, with firewall reviews
Testing and monitoring
- Penetration testing at least annually, with remediation tracked against SLAs
- Incident response plan tested at least annually
- Vulnerability management and system monitoring procedures
People and vendors
- Employee background checks
- Confidentiality agreements for employees and contractors
- Written agreements with vendors that include confidentiality and privacy commitments
- Customer data deleted when a customer leaves
Need our SOC 2 report?
SOC 2 Type I and SOC 2 Type II reports, audited by Johanson Group, are available on request through our Vanta Trust Center. For security questions, email security@paymanai.com.
Request accessFrequently asked questions
Is Payman AI SOC 2 compliant?
Yes. Payman AI has SOC 2 Type I and SOC 2 Type II reports, audited by Johanson Group.
How do I get the SOC 2 report?
SOC 2 Type I and SOC 2 Type II reports are available on request through the Vanta Trust Center at trust.paymanai.com.
How is data encrypted?
Datastores with sensitive customer data are encrypted at rest. Data is encrypted in transit over public networks. Portable media is encrypted, and access to encryption keys is restricted.
Is customer data used to train AI models?
No. Customer data is not used to train AI models.
Who do I contact about security?
Email security@paymanai.com.