Compliance & Security
ZeroShare Gateway is designed to help organizations meet their compliance and security requirements.
Note: ZeroShare Gateway provides technical features designed to support your compliance efforts. We are working toward formal certifications. Your organization remains responsible for overall compliance with applicable regulations.
Compliance Support
ZeroShare Gateway is designed with compliance requirements in mind. Our on-premise architecture ensures that sensitive data remains within your control and infrastructure.
SOC 2 Ready
ZeroShare Gateway is designed with SOC 2 Trust Service Criteria in mind. We are actively working toward SOC 2 Type II certification. Our architecture includes audit logging, access controls, and encryption aligned with SOC 2 requirements.
GDPR Support
Designed to support GDPR requirements. ZeroShare Gateway includes EU PII patterns, data subject rights support, and on-premise deployment ensuring personal data remains within your infrastructure and control.
HIPAA Support
Designed to support HIPAA requirements by detecting and protecting PHI before it reaches AI services. On-premise deployment ensures data never leaves your controlled environment. BAA available upon request.
PCI DSS Support
Designed to help protect payment card data by detecting and blocking credit card numbers and other sensitive financial information before exposure to external AI services.
ISO 27001 Aligned
Designed with ISO 27001 information security principles in mind. Our security controls and on-premise architecture support your ISO 27001 compliance efforts.
CCPA Support
Designed to support California Consumer Privacy Act (CCPA) requirements by providing control over personal information and preventing unauthorized data sharing to AI services.
Security Features
- On-Premise Deployment: All data processing occurs within your infrastructure
- End-to-End Encryption: Data is encrypted in transit and at rest
- Access Controls: Role-based access control and authentication mechanisms
- Audit Logging: Comprehensive logging of all requests and actions
- Regular Security Updates: Timely patches and security updates
- Vulnerability Management: Regular security assessments and penetration testing
Data Residency
ZeroShare Gateway is designed with data residency in mind. Since the service operates entirely on-premise, you maintain complete control over where your data is stored and processed. This is particularly important for organizations subject to data residency requirements in various jurisdictions.
Compliance Documentation
For detailed compliance documentation, security questionnaires, or compliance certifications, please contact our compliance team through our support form.
Your Responsibilities
While ZeroShare Gateway provides security and compliance features, you are responsible for:
- Proper configuration and deployment of the service
- Maintaining appropriate security controls in your infrastructure
- Regular security assessments and compliance audits
- Ensuring compliance with applicable laws and regulations
- Managing access controls and user permissions
- Monitoring and reviewing audit logs
Contact Compliance Team
For questions about compliance, security certifications, or to request compliance documentation, please contact us through our support form.