Security and compliance, in the open.
The current status of our certifications, the controls we operate and how we handle client data. Updated as things change.
Compliance program
We are building our compliance program in step with our client base. Items marked In progress are actively underway; Planned items are on our roadmap.
Security questionnaires, policies and audit evidence are available under NDA from security@imgori.online.
Independent audit of security controls design
Audit of controls operating over time
Information security management system
Signed on request for client engagements
For all staff with client system access
Required on all company systems
Full-disk encryption and MDM on all laptops
Time-boxed, client-controlled and logged
How we treat your data
Your data stays in your environment
In private deployments, models, prompts, embeddings and logs remain in infrastructure you control.
Access you grant and revoke
Our engineers use named, time-limited accounts that you provision and can remove at any time.
Nothing kept after the engagement
Any client data used during delivery is deleted at close-out, with written confirmation.
Report it to security@imgori.online. See our security page for details.