Trust
How Selenor protects your data, your clients and your reputation.
Request documentsLast reviewed 11 Oct 2026
At a glance
Hosted on AWS in Oregon, USA
Encrypted at rest (AES-256) and in transit (TLS)
Anthropic Claude through Amazon Bedrock, with no training on client data
Staff access to client data only with your approval (rolling out)
Three subprocessors, listed below
Clients notified within 72 hours of a confirmed breach
Compliance
Selenor is not independently certified yet. We run on certified infrastructure and say so plainly.
SOC 2
Not started. Planned once client volume justifies an audit.
PlannedInfrastructure
AWS holds SOC 1, 2 and 3, ISO 27001 and PCI DSS. Reports are available through AWS Artifact.
In placePenetration test
Not yet performed.
PlannedData Processing Addendum
Available for clients.
On requestVulnerability disclosure
Policy with scope and safe harbor, published with this site.
At go-liveAI and data use
Models
Anthropic Claude Haiku 4.5 and Amazon Nova Sonic, through Amazon Bedrock in our own AWS accounts.
Training
Your data is never used to train or fine-tune models.
Location
Processing stays inside AWS in the United States.
Disclosure
Every call says it is an AI and that it is recorded, at the start.
Controls
EncryptionIn place
AES-256 at rest, TLS required in transitClient data separationIn place
Each client's data logically separated and testedStaff accessIn place
Single sign-on, short-lived credentials, MFAApprove-first accessAt go-live
Client approves each request; every access loggedMonitoringIn place
Alarms on failures, latency and compliance hitsBackupsIn place
Point-in-time recovery for 35 daysSecure developmentIn place
Infrastructure as code, automated checks, staging firstAudit trailAt go-live
Organization-wide logging in a separate accountSubprocessors
We notify clients before adding a subprocessor.
Amazon Web Services
Hosting, storage, telephony, AI inference, email
United StatesCal.com
Appointment booking, where the client uses it
To be confirmedStripe
Billing. No caller data
PlannedDocuments
Security & Trust Overview
Available to prospective and current clients.
On requestSecurity questionnaire answers
Available to prospective and current clients.
On requestData retention policy
Available to prospective and current clients.
On requestIncident response summary
Available to prospective and current clients.
On requestData Processing Addendum
Available to prospective and current clients.
On requestReport a vulnerability
Write to security@selenorai.com. Our disclosure policy covers scope, response times and safe harbor.