Hypatos GmbH

According to Hypatos GmbH's public trust center, Hypatos GmbH is GDPR compliant. On SOC2C this listing is Listed.

According to Hypatos GmbH's public trust center, Hypatos GmbH is CSA STAR certified. On SOC2C this listing is Listed.

Hypatos GmbH is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Yes. Hypatos GmbH's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Hypatos GmbH hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Hypatos GmbH's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Hypatos GmbH publishes an ISO certificate on its trust center; you can request access through SOC2C.

Security isn't a single yes/no, but Hypatos GmbH is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001, ISO 27017, ISO 27018, HIPAA, GDPR, CSA STAR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Hypatos GmbH hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@hypatos.ai or via a /security page (Hypatos GmbH lists a security contact).

Hypatos GmbH lists 6 subprocessors on its trust center, including Amazon Web Services, MongoDB Atlas, Google Cloud Platform, Microsoft 365, Jira. Buyers use this for fourth-party risk review.

Hypatos GmbH hosts on AWS, GCP, and handles Data contained in documents uploaded to Hypatos Cloud platform. Data residency details are on its trust center.

Hypatos GmbH's trust center is at https://trustreport.hypatos.ai. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Hypatos is a software company that specializes in advanced document processing and intelligent process automation. Our AI Agents leverage LLM combined with RAG, prompting and tooling to streamline repetitive, manual tasks, such as invoice processing, document classification, data extraction, master data matching. Our solutions help organizations achieve greater accuracy, operational efficiency, and cost savings.

_Data processed by third-party LLM Providers:_ We only utilise reputable LLM providers that have strict privacy standards in place - any data submitted via API to them is used solely to process the specific request and is not retained or used for training or improving their AI models. Hypatos is only using their base/pretrained models, which are stateless, meaning no prompts or output are stored in the models –after an output is generated, the prompt is immediately discarded. _Data processed and stored by Hypatos:_ By default, documents uploaded by customers to Hypatos Cloud are retained for 6 months. After this period, all data is automatically and permanently deleted. Documents used as a knowledge base may be retained for longer periods based on customer preferences, to ensure that the AI has access to sufficient customer-specific reference data so Hypatos can provide the highest quality and accuracy of services. Customer data is logically segregated between customers on the database layer and all locations where customer data is stored are encrypted using AES-256.

No. Our approach does not involve the conventional sense of “training” a model on customer data. Instead, we leverage pre-existing foundation large language models (LLMs) that are not retrained with customer-specific data. Our method uses in-context learning and advanced retrieval-augmented generation (RAG), which means that the model draws from relevant information provided during specific interactions without modifying the model itself or creating a customer-tailored generative model.

Hypatos hosts its cloud services on servers provided by Amazon Web Services (AWS). Customers can select between two AWS Regions for hosting their data based on data residency requirements: - eu-west-1 (Europe - Ireland) - us-east-1 (US - N.Virginia)

Hypatos commits to offer availability Service Level Agreements (SLAs) between 98% and 99.5% depending on the subscription plan selected by the customer.

We have established the following RTO and RPO targets for Hypatos Cloud: - RTO: 24 hours - RPO: 6 hours

We have a documented Security Incident Response Plan that outlines the procedures for identifying, containing, eradicating, and recovering from security incidents. If a data breach occurs that affects customer data, we we will notify impacted customers within 72 hours of incident discovery. We also collaborate closely with your internal security and IT teams to implement remediation steps.

Yes, please refer to our CAIQ which is available in the Documents section of our Trust Report.

Yes. We have worked with organizations in highly regulated industries like banking, healthcare, or insurance, where stringent security controls are non-negotiable. Specific references and case studies on how we meet complex compliance and security requirements can be provided on demand.

Hypatos has a dedicated Security & Compliance team that can be reached at security@hypatos.ai. We welcome the opportunity to discuss your specific requirements, provide documentation, or arrange consultations with our technical experts.