Trust Center - Norm Ai
Norm Ai
Norm Ai builds AI-powered solutions that help organizations confidently automate legal and regulatory processes. We are committed to earning and maintaining trust through rigorous security practices, including SOC 2 compliance, continuous monitoring, and a company-wide culture of data protection and integrity.
At Norm Ai, trust is the foundation of everything we do. We partner with leading financial services and insurance organizations to deliver AI solutions that meet the highest standards of security, privacy, and compliance. Our SOC 2 Type II certified program includes robust encryption, access controls, secure development practices, continuous monitoring, and third-party audits. We maintain a culture of security across our team and are committed to transparency, offering customers full visibility into our security posture through this Trust Center.
Compliance
SOC 2
Resources
Letters
BC/DR Exercise Letter of Attestation
Penetration Test (2026H1) Executive Summary
Reports
Whitepapers
Security Fact Sheet
Other resources
CAIQv4.1.0 Questionnaire Responses
Controls
Updated 1 minute ago
- Unique production database authentication enforced
- Encryption key access restricted
- Unique account authentication enforced
- Asset disposal procedures utilized
- Production inventory maintained
- Anti-malware technology utilized
- Data encryption utilized
- Control self-assessments conducted
- Penetration testing performed
- Continuity and Disaster Recovery plans established
- Continuity and Disaster Recovery plans tested
- Cybersecurity insurance maintained
- Data retention procedures established
- Customer data deleted upon leaving
- Data classification policy established
Data collected
- Employee personally identifiable information
- Customer-specific content
Subprocessors
Anthropic • LLM Infrastructure
Microsoft Azure • LLM Infrastructure
Open AI • LLM Infrastructure
Ask Norm Ai a question
Request access to Norm Ai's Trust Center to access AI powered responses.
Vanta AI will index the resources in the Trust Center and provide a summarized answer to any compliance and security question.