Security at Ando
Trust is part ofthe architecture
Ando is where people and agents work together. We protect the conversations and context entrusted to us with technical and organizational safeguards designed into how we build and operate the service.
Ando security
Independent assurance
Security posture
SOC 2 Type I
Examination completed July 2026
Complete
SOC 2 Type II
Observation period in progress
Active
Reports and supporting documentation are available to qualified customers and prospects upon request.
Our commitment
Security is a continuous practice
Our program evolves with Ando, our customers, and the threat landscape.
Protect
Safeguards built into access, data, and development.
Monitor
Signals and logs that help us understand service health.
Respond
Practiced processes for investigation and remediation.
Security practices
How we protect Ando
Controls span how we grant access, write software, operate infrastructure, and work with service providers.
01
Access control
We limit access to systems and customer data based on job responsibilities, protect privileged access, and review access regularly.
02
Data protection
We use encryption in transit and at rest, manage secrets outside source control, and minimize access to customer data.
03
Secure development
Production changes are peer reviewed, checked automatically, and deployed through controlled release processes.
04
Monitoring and response
We monitor production services, retain security-relevant logs, and maintain procedures for investigating and responding to incidents.
05
Vulnerability management
We scan dependencies and infrastructure, prioritize findings by risk, and track remediation to completion.
06
Vendor oversight
We assess service providers that handle company or customer data and review their security posture throughout the relationship.
Resources
Policies and reporting
Privacy policy
How Ando collects, uses, and protects personal information.
Terms of service
The terms governing access to and use of Ando.
Vulnerability disclosure
How security researchers can report a suspected issue.
Need security documentation?
Customers and qualified prospects can contact us to request security reports or ask questions about our program.
Security information last reviewed .