Barndoor AI

Security is the foundation of everything we do at Barndoor AI, Inc. As an artificial intelligence company serving enterprise customers, we understand that trust begins with robust security practices. Our commitment to security goes beyond compliance—it's embedded in our culture, our technology, and our relationships with customers.

FAQ

Data Security & Privacy

How do you protect my data?

We implement multiple layers of security including encryption at rest and in transit, network security controls, access logging, and regular security monitoring. All data is stored in SOC 2 compliant infrastructure with strict access controls and comprehensive audit trails.

Where is my data stored and processed?

Customer data is stored and processed in secure data centers located in the United States. We use industry-leading cloud providers including AWS, Google Cloud, Cloudflare.

Do you encrypt data in transit and at rest?

Yes, all data is encrypted using AES-256 encryption at rest and TLS 1.3 for data in transit. Encryption keys are managed through industry-standard key management systems with regular rotation policies.

Who has access to customer data?

Access to customer data is strictly limited to authorized personnel who require it for their job function. All access is logged, monitored, and subject to our principle of least privilege. Customer data access requires multi-factor authentication and is regularly reviewed.

How do you handle data deletion requests?

We honor all data deletion requests within 30 days. Upon request, we securely delete all customer data from our production systems and backups. We provide confirmation of deletion upon completion. Please see our privacy policy for more info.

Do you perform background checks on employees with data access?

Yes, all employees with access to customer data undergo comprehensive background checks as part of our hiring process. We also provide regular security awareness training and require signed confidentiality agreements.

What happens to my data if I cancel my service?

Upon service cancellation, you have 90 days to export your data. After this period, all data is securely deleted from our systems. We can provide earlier deletion upon request and will confirm when deletion is complete.

Compliance & Certifications

What security certifications do you have?

We maintain SOC 2 Type II certification and are working toward additional certifications. Our infrastructure providers maintain additional certifications including PCI DSS, HIPAA, and FedRAMP compliance where applicable.

How often do you undergo security audits?

We conduct annual SOC 2 audits with third-party auditors. Additionally, we perform quarterly internal security assessments and continuous monitoring of our security controls.

Can you provide compliance documentation for our procurement process?

Yes, we can provide our SOC 2 reports, security questionnaire responses, and other compliance documentation under NDA. Please contact our security team at security@barndoor.ai for access.

Infrastructure & Technical Security

What cloud providers do you use?

We primarily use AWS, Google Cloud and Cloudflare for our infrastructure, chosen for their industry-leading security certifications and compliance frameworks. All services are deployed in compliance with security best practices.

How do you monitor for security threats?

We employ 24/7 security monitoring using tools, intrusion detection systems, and automated threat detection. Our security team investigates all alerts and maintains incident response procedures for any identified threats.

Do you perform penetration testing?

Yes, we conduct annual penetration testing with qualified third-party security firms. We also perform regular vulnerability assessments and address any identified issues according to our vulnerability management program.