Resources
Security Overview
Endee is built for regulated industries. ISO 27001 certified, SOC 2 Type II audited, and GDPR-ready, with Queryable Encryption for workloads where data sovereignty is non-negotiable.
Compliance
Industry certifications
ISO 27001
Information Security Management
Endee is ISO 27001 certified across its cloud and enterprise offerings. Controls cover data classification, access management, physical and environmental security, incident response, and business continuity. Certification scope, certificate number, and audit reports are available to enterprise customers under NDA.
SOC 2 Type II
Security, Availability & Confidentiality
Annual SOC 2 Type II audits are conducted by an independent AICPA-accredited auditor covering the Trust Service Criteria for Security, Availability, and Confidentiality. Reports are available to prospective and existing enterprise customers during security review.
GDPR
European Data Protection Regulation
Endee Cloud operates EU-resident deployments to satisfy GDPR data residency requirements. Standard Contractual Clauses (SCCs) are available for cross-border data processing. Data Processing Agreements (DPAs) are available on request and included with all Enterprise contracts. Right-to-erasure tooling allows vector-level deletion of individual records.
Queryable Encryption
Search encrypted data without ever exposing it. True zero-knowledge security.
Zero Knowledge
Your data is encrypted client-side. We never see your raw vectors or queries.
Searchable Encryption
Perform similarity searches on encrypted data without decryption on our servers.
Compliance Ready
Meet ISO 27001, GDPR, and SOC 2 requirements with encryption at rest and in transit.
Core Technology
Queryable Encryption
Endee's Queryable Encryption lets you run similarity search directly on encrypted vectors. Your data is never exposed in plaintext: not at rest, not in transit, and not at query time. Built for regulated industries where data sovereignty is non-negotiable.
Talk to our teamControls
Security at every layer
Encryption at Rest
All data stored in Endee Cloud is encrypted at rest.
Encryption in Transit
All API traffic is encrypted in transit.
Role-Based Access Control
Access control with API key scoping and read/write separation.
Audit Logging
Logs of API operations, authentication events, and administrative actions.
Vulnerability Management
Regular dependency scanning and coordinated disclosure program.
Data Residency
Enterprise on-premises deployment keeps data within your infrastructure.
Security documentation
ISO 27001 certificates, SOC 2 reports, DPAs, and penetration test summaries are available under NDA to enterprise customers and qualified prospective customers. Contact our team to initiate a security review.