Security & Trust

Security you can build a business on

AI92 runs on an enterprise-grade security edge. Here is exactly how we protect your data, your customers and your campaigns.

Enterprise WAF & DDoS protection
TLS 1.3 encryption
GDPR-compliant
Payments secured by Stripe

Encryption in transit

Everything is served over HTTPS with modern TLS 1.3, HSTS and Encrypted Client Hello, with strong ciphers enforced across every endpoint.

Application & network protection

A managed Web Application Firewall blocks common attacks such as injection and cross-site scripting. Automated bot mitigation and rate limiting stop abuse and credential-stuffing, and unmetered DDoS protection absorbs volumetric attacks.

Secure payments

Payments are processed by Stripe, certified to PCI DSS Level 1 — the highest level in the payments industry. We never see or store your full card details.

Data protection & privacy

We are built for GDPR and UK-GDPR: a first-party consent layer, a Data Processing Agreement and clear data-handling practices. Read our Privacy Policy and Cookie Policy for the full detail. You stay in control of your data.

DNS integrity

We use DNSSEC to protect our domain against DNS spoofing and hijacking.

Continuous monitoring

Our platform is monitored around the clock. Security events are logged and reviewed, and our edge mitigates threats in real time.

Live system status

Responsible disclosure

Found a vulnerability? We want to hear from you — email [email protected] and we will respond quickly.

Compliance & certifications

GDPR — compliant
PCI DSS Level 1 — via Stripe
PCI DSS SAQ-A — completed
DPIA — completed
Incident response plan
SOC 2 Type II and ISO 27001 — on our roadmap

Full reports available under NDA.

Last updated: July 2026