Trust Center
Everything your security review will ask for.
Reports and policies under NDA, standard agreements in the open.
Documents
Compliance documentation.
| Document | Scope | Access | |
|---|---|---|---|
| SOC 2 Type II report | Audit period ending 2026-06-30 | Under NDA | Request |
| Penetration test executive summary | Tested 2026-05 | Under NDA | Request |
| Information security policy | Version 4.2 | Under NDA | Request |
| Business continuity & disaster recovery plan | RPO 1 hour, RTO 8 hours | Under NDA | Request |
| HIPAA Business Associate Agreement | Standard form | Public | View |
| Data Processing Addendum | Standard form | Public | View |
| Subprocessor list | 30 days' notice of changes | Public | View |
| Completed SIG Lite / CAIQ questionnaire | 2026 | Under NDA | Request |
Security program
Controls by domain.
Access control
- SSO with SAML 2.0
- Enforced MFA
- Quarterly access reviews
- Just-in-time production access
Data protection
- AES-256 at rest
- TLS 1.3 in transit
- Per-tenant keys
- Customer-managed keys (Enterprise)
Operations
- 24 x 7 monitoring
- Immutable audit logs
- Encrypted backups, 35-day retention
- Annual DR test
People
- Background checks
- Annual security and HIPAA training
- Confidentiality agreements
- Least-privilege roles
Security contact: security@ishqkala.si · Responsible disclosure: security policy · security.txt
Find the millions hiding in your closed claim files before the Statute of Limitations expires.
We'll scan a batch of 500 closed claims for free and deliver an itemized recovery manifest within 5 business days.