Security & compliance

Your Trust.
Our Responsibility.

InfrAgent AI is built from the ground up with security, privacy, and compliance as core requirements — not afterthoughts.

GDPR & DPDP Compliant

Full compliance with UK GDPR, EU GDPR, and India's DPDP Act 2023. Your customer data is never sold and never used to train shared AI models.

AES-256-GCM Encryption

All data encrypted at rest (AES-256-GCM) and in transit (TLS 1.3). Inbound webhooks from Meta, Twilio and Stripe are signature-verified.

Tenant Data Isolation

Every tenant is isolated at the database layer with Postgres row-level security. Other businesses can never access your conversations, contacts, or configuration.

EU Data Residency

Primary hosting in Germany (EU). Transfers to vetted sub-processors are protected by UK IDTA and EU Standard Contractual Clauses. Additional regions are on our roadmap.

Certifications & Compliance

UK ICO registered
UK & EU GDPR compliant
India DPDP compliant
ISO 27001 (in progress)
SOC 2 Type II (in progress)
Meta Business Verified

Legal Documents

Every tenant accepts these during onboarding, with a digitally signed, timestamped record.

Have a security question?

Our security team responds to all enquiries within 24 hours.

Contact security team →