TRUST CENTERExamined, certified and ready.
SOC 2 Type IIOperational security, independently examined.Six layers of protection.
SOC 2 Type II
Examined controls to safeguard enterprise and client data.
Encryption engine
In transit and at rest. Bring your own keys on request.
Continuous monitoring
Vulnerability scanning, pen testing and patch management.
MFA and 2FA
An additional layer of protection for every account.
Audit trails
Every user action tracked with a timestamp.
Role-based access controls
Enterprise-scale permissions by role, team, branch and line of business, plus delegated and third-party access.
Secure AI, by design. Not by exception.
The same controls that protect every document protect every AI answer, extraction and action.
- Private large language modelsAI runs on private models. Your documents stay within your environment and are never shared with public AI services or used to train them.
- Permission-aware by defaultAI inherits role-based access controls and enterprise-scale permissions, so it only ever sees what that user is allowed to see.
- Every AI action on the recordEvery question, answer, extraction, summary and agent action is logged in the audit trail, with the documents it used.
- Cited and verifiableAnswers link to the exact source documents, and every extracted field carries a confidence score.
- Your firm’s controlsAI is enabled where you configure it, and retention policies and legal holds apply to AI as to every document.
- Residency and encryptionHosting in Canada, the United States or Europe, encryption in transit and at rest, and your own keys on request.
- Independently examinedSOC 2 Type II examined, with 24/7 monitoring, vulnerability scanning and penetration testing.
AI security questions, answered.
Is our data used to train AI models?
No. FutureVault runs AI on private large language models, and your documents stay within your environment. They are never shared with public AI services or used to train their models.
Can AI see documents a user isn’t allowed to see?
No. AI inherits the same role-based access controls and enterprise-scale permissions as your people, so answers, extractions and agent actions only draw on documents that user is permitted to see.
How do we review what AI did?
Every AI question, answer, extraction, summary and agent action is recorded in the audit trail with the documents it used, so compliance can review it like any other activity.
Can we control where AI is used?
Yes. AI capabilities are enabled where they are configured for your portal, and your retention policies, legal holds and data residency apply to AI just as they do to every document.