At Halley AI™, safeguarding our systems, data, and customer privacy is paramount. We follow industry-recognized security best practices and continually update our controls to address emerging threats. Our infrastructure is hosted in U.S. data centers provided by Rackspace®, a SOC 2 compliant provider.
Halley AI™ is committed to protecting the confidentiality, integrity, and availability of our digital assets. This policy describes the security controls we apply across our infrastructure, which is hosted in U.S. data centers operated by Rackspace®, a SOC 2 compliant provider.
Confidentiality: Prevent unauthorized access to sensitive information.
Integrity: Maintain the accuracy and consistency of our data.
Availability: Ensure reliable access to systems and services.
Compliance: Design our practices to comply with the U.S. regulations and industry standards that apply to us.
Security is owned by our Chief Operating Officer, who serves as our designated security officer. The engineering team implements and maintains controls. All employees follow security procedures and report potential issues.
Rackspace Data Centers: Our infrastructure is hosted at Rackspace facilities that offer:
Collaboration: We work closely with Rackspace to ensure their robust physical security measures are fully integrated with our internal policies.
Perimeter Protection: Firewalls and intrusion detection/prevention systems guard our network boundaries.
Secure Communications: All data is transmitted via encrypted channels (e.g., VPN, TLS 1.2/1.3).
Network Segmentation: Critical systems are isolated from less sensitive environments.
Authentication: Multi-factor authentication (MFA) is required for accessing critical systems.
Authorization: Role-based access controls (RBAC) ensure users receive only the permissions necessary for their roles.
Account Management: Regular reviews ensure prompt adjustment of user access as roles change.
Encryption: Data in transit is protected via TLS encryption. AES-256 encryption at rest is available for clients and workloads that request it.
Backup & Recovery: Regular backups are conducted and restoration processes are periodically tested.
Privacy Compliance: Our practices are designed to comply with the U.S. data-protection laws and regulations that apply to us.
Secure Development: We follow secure coding practices and conduct regular code reviews.
Patch Management: Timely updates and patches are applied to mitigate vulnerabilities.
Security Testing: Our hosted platform gets quarterly external scans from an Approved Scanning Vendor and internal vulnerability scans.
Incident Response Plan: A structured plan is in place to address, contain, and resolve security incidents.
Reporting Procedures: Employees are encouraged to report any suspicious activity immediately.
Continuous Improvement: Post-incident analyses help refine our security measures over time.
Continuous Monitoring: Our systems are continuously monitored for unusual activity.
Comprehensive Logging: Detailed logs support forensic investigations.
Regular Audits: Periodic security audits ensure compliance with our policy.
State-of-the-Art Security: Rackspace's facilities provide robust physical and network security controls.
Ongoing Collaboration: We maintain regular communication with Rackspace to align security strategies and address emerging issues.
Regulatory Compliance: Our policies are designed to comply with the U.S. laws that apply to us and are aligned with recognized frameworks such as NIST and ISO 27001.
Employee Training: Regular security-awareness training ensures staff are informed about best practices and emerging threats.
This policy is reviewed annually and updated as necessary to address new risks and technological advancements. All updates are approved by our executive management team.
For any questions or concerns regarding our security practices, please contact our security officer at security@halleyai.ai.
See Halley on your own content, with controlled boundaries from day one.