Independently audited.
Prescient Assurance LLC examined Vailent’s controls and issued a SOC 2 Type 2 report covering Security and Processing Integrity, for the period April 13, 2026 to July 13, 2026. Type 2 means the controls were tested across that period rather than described on a single day. The report is confidential and shared under NDA. Send your security review and we will take it from there.
Three things worth saying.
Not a full control list, on purpose. These are the three a reviewer cannot assume from any vendor, so they are the three worth reading here.
Tenant isolation is enforced at the database
Not only in application code. Every query runs inside a session scoped to one tenant with row-level security applied, so a bug in a feature cannot reach across the boundary that the database itself holds.
The AI cannot write to your records
Queries the assistant generates execute read-only, inside a transaction that cannot write, with a statement timeout, a hard row limit and a keyword blocklist, on a session already scoped to your tenant. The sandbox is the load-bearing control, not the prompt.
Full email bodies are not stored
Where Pipeline reads a mailbox, message bodies are deliberately not persisted at sync. It is a documented design decision, made to limit what exists at rest rather than a side effect.
Send us the
questionnaire.
If your security review asks something we have not covered here, send it over. A person will answer in writing, at the level your team works at.