# Barndoor AI

Security is the foundation of everything we do at Barndoor AI, Inc. As an artificial intelligence company serving enterprise customers, we understand that trust begins with robust security practices. Our commitment to security goes beyond compliance—it's embedded in our culture, our technology, and our relationships with customers.

[security@barndoor.ai](mailto:security@barndoor.ai)

## Compliance

SOC 2

## Resources

- [Engagement Letter](https://trust.barndoor.ai/?requestAccessOpen=true&requestedResources=6851bc8e2f98884410c13995)
- [SOC 2 Type II Report](https://trust.barndoor.ai/?requestAccessOpen=true&requestedResources=6a1a03aa641121422bf274c3)
- [Incident Response Plan](https://trust.barndoor.ai/?requestAccessOpen=true&requestedResources=6903ce152b0ea2805c000c80)
- [Business Continuity and Disaster Recovery Plan](https://trust.barndoor.ai/?requestAccessOpen=true&requestedResources=6903cedc040b4e7c1bf9dab8)

## Controls

Updated 7 minutes ago

### Infrastructure security

- Unique production database authentication enforced
- Encryption key access restricted
- Unique account authentication enforced

### Organizational security

- Asset disposal procedures utilized
- Production inventory maintained
- Portable media encrypted

### Product security

- Data encryption utilized
- Control self-assessments conducted
- Penetration testing performed

### Internal security procedures

- Continuity and Disaster Recovery plans established
- Continuity and Disaster Recovery plans tested
- Cybersecurity insurance maintained

### Data and privacy

- Data retention procedures established
- Customer data deleted upon leaving
- Data classification policy established

## Subprocessors

- **Cloudflare** • Cloud monitoring • California, USA • DNS, web security and performance processor
- **Depot** • Managed CI/CD processor • Oregon, USA
- **GitHub** • Version control • California, USA • Version control and code storage
- **Google Cloud Platform** • Cloud provider • California, USA • Core infrastructure, stores/processes customer data

Vanta connects to a company's core systems to continuously monitor these controls.