SOC 2 Type II
Two years running, zero exceptions. Audited by Advantage Partners.
The only EOS software with a published SOC 2 Type II report
Enterprise Grade Security
Trusted by the most secure
EOS One is the most secure EOS platform.
Our team has secured data for the Pentagon, Navy SEALs, FBI and more.
Privacy and security as a differentiator
HIPAA-ready · BAA available
A Business Associate Agreement is available on request. Do not upload PHI until a BAA is in place.
Military-grade encryption
Military-grade encryption in transit (TLS 1.2+) and at rest
- ✓ We do not sell your data to any third party
Privacy and security as a differentiator
We don't sell your personal information
We do not sell your personal information.
“We do not sell your personal information.”Privacy Policy §6
You own your data
You retain ownership of all Content you submit. We don't own your data just because you use it with our platform. You can request a copy of your data (access/portability), correct it, or request deletion. On termination we delete or return Personal Data within 30 days at your election; export your data before canceling. Deletion is subject to legal or contractual retention requirements and the DPA's permissible retention terms.
“You retain ownership of all Content you submit.”Terms §6 · Privacy Policy §8.1 · DPA
AI doesn't train on your content
EOS One does not use your Content to train, fine-tune, or otherwise develop machine learning models, whether our own models or those of any third party.
“EOS One does not use your Content to train, fine-tune, or otherwise develop machine learning models, whether our own models or those of any third party.”Privacy Policy §5
Our team’s security experience
Our team has secured data for the Pentagon, Navy SEALs, FBI and more.
SOC 2 Type II
The only EOS software with a published SOC 2 Type II report
Audited by Advantage Partners, EOS One has two consecutive SOC 2 Type II reports covering the Security criteria — two years running, with zero exceptions. The latest report covers October 15, 2025 – January 15, 2026. The opinion, dated March 9, 2026, is unmodified, with zero exceptions.
SOC 2 Type II is the stronger of the two SOC 2 report types — Type I reviews controls at a point in time; Type II tests those controls over a period of time.
HIPAA-ready · BAA available
EOS One follows HIPAA Security Rule policies for customers with an executed BAA.
A Business Associate Agreement (BAA) is available on request for customers who handle protected health information (PHI), as described in our Terms. Do not upload PHI until a BAA is in place.
Read our TermsSecurity controls
Secure hosting
Our infrastructure is hosted on encrypted, SOC 2 Type II audited cloud platforms.
Privacy Policy §9Tenant isolation
Your Content lives in a logically isolated tenant and is never made available to any other EOS One customer.
Terms §7Access controls
Staff access to customer data is limited on a need-to-know, role-based basis, protected by multi-factor authentication, and logged.
Privacy Policy §5 · §9
Full details are in our Privacy Policy and Terms.