Trust Center

Security and compliance, in the open.

Everything a finance buyer's diligence checklist asks for, in one place — our SOC 2 posture, how we handle data, and how to reach security.

Certifications

SOC 2 Type I — audit engaged.

We report our status exactly, because a finance buyer can tell the difference between a badge and the truth. GDPR data-processing terms are available via legal@meilynx.com.

SOC 2 status

A SOC 2 Type I audit is engaged. Initial scope covers the Security and Confidentiality Trust Service Criteria across our Managed and Self-Hosted deployment modes. Type II observation begins immediately after.

Data handling

Where your data lives — and doesn't.

The architecture is the control: raw prompts and responses never leave your perimeter.

Raw payload stays in your perimeter

The proxy processes prompts and responses inside infrastructure dedicated to your organization. Only hashed, aggregate metadata reaches the shared control plane.

Per-customer isolation, every mode

Managed, BYOS, and Self-Hosted all deploy into infrastructure dedicated to your organization — your data is never mixed with another customer's.

Encryption at rest

Audit data in Fully Managed mode is encrypted at rest with per-customer keys; in-transit traffic uses TLS.

Tamper-evident audit trail

Every governed request is sealed into a hash-chained, examiner-verifiable record with a multi-year retention floor.

Reach us

Security, privacy, and legal.

Security

Report a concern

Email security@meilynx.com for security questions or to report a vulnerability.

Privacy

DPA & data requests

Request a Data Processing Addendum at legal@meilynx.com. See our Privacy Policy.

Frameworks

Control coverage

See how controls map to SR 11-7, NYDFS 500, FINRA 24-09, and SOC 2 on the frameworks pages.

Diligence-ready

Need our security package?

Live control status and NDA-gated reports live in our Trust Center. Design partners also get source access and a direct line for security review.

View live control status Contact us