Maestro Labs PTE

Yes — Maestro Labs PTE undergoes third-party penetration testing as part of its security program. The pentest vendor is listed on its SOC2C profile.

Maestro Labs PTE's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Maestro Labs PTE publishes a penetration test summary on its trust center. You can request access to it through SOC2C.

Security isn't a single yes/no, but Maestro Labs PTE is SOC 2 Type II compliant and holds SOC 2 Type II, GDPR, HIPAA, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Maestro Labs PTE hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@maestrolabs.com or via a /security page (Maestro Labs PTE lists a security contact).

Maestro Labs PTE lists 17 subprocessors on its trust center, including Amazon Web Services, Microsoft Azure, Slack, OpenAI, Office 365. Buyers use this for fourth-party risk review.

Maestro Labs PTE hosts on AWS, Azure. Data residency details are on its trust center.

Maestro Labs PTE's trust center is at https://security.maestrolabs.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Maestro Labs is SOC 2 Type II and GDPR compliant, with regular external audits and penetration testing to ensure data security. - SOC 2 Type II Audit: An external review that verifies our security practices over time, confirming our commitment to keeping your data safe. - GDPR Compliant: We follow the EU’s data protection standards, ensuring your personal data is managed securely and responsibly. - Penetration Testing: Regular tests to identify and fix potential system vulnerabilities, keeping your data protected. These measures help us maintain high standards of security and privacy for our users.

Yes. Maestro Labs supports HIPAA-regulated use cases when acting as a Business Associate under an executed Business Associate Agreement (BAA). HIPAA safeguards are implemented through our shared security controls and policies — including access controls, encryption, incident response, workforce security, and audit logging — which also underpin our SOC 2 Type II program. Our Business Associate Agreement (BAA) is available upon request at support@maestrolabs.com.

Maestro Labs and its subprocessors are contractually prohibited from using customer data to train third-party or general-purpose AI models. Customer data is processed only to deliver, secure, and support the services.

Maestro Labs stores customer data on AWS infrastructure in the United States. AWS provides enterprise-grade cloud security controls, and Maestro Labs applies its own safeguards on top, including encryption in transit and at rest, access controls, monitoring, vendor due diligence, and contractual protections for international transfers. For larger enterprise deployments with specific residency needs, we can discuss available options.

Maestro Labs stores customer data only for as long as needed to provide the service. - Individual meetings are completely deleted when requested. - All data will be erased after deleting your account.

Yes. Users can choose which meetings TeamsMaestro joins. Once in a call, they can also pause or disable TeamsMaestro at any time during the meeting.

MailMaestro never scans your inbox. It only processes the specific email information needed for features such as drafting, summaries, labeling, and automatic folder creation based on labels. The only time a full inbox analysis may occur is during initial setup, when the user is explicitly asked whether they want to enable a one-time analysis to improve MailMaestro’s accuracy for their own benefit. If the user does not choose this, it does not happen; after setup, MailMaestro will not ask this again and will never automatically scan the inbox.