# Norm Ai

Norm Ai builds AI-powered solutions that help organizations confidently automate legal and regulatory processes. We are committed to earning and maintaining trust through rigorous security practices, including SOC 2 compliance, continuous monitoring, and a company-wide culture of data protection and integrity.

At Norm Ai, trust is the foundation of everything we do. We partner with leading financial services and insurance organizations to deliver AI solutions that meet the highest standards of security, privacy, and compliance. Our SOC 2 Type II certified program includes robust encryption, access controls, secure development practices, continuous monitoring, and third-party audits. We maintain a culture of security across our team and are committed to transparency, offering customers full visibility into our security posture through this Trust Center.

## Compliance

SOC 2

## Resources

### Letters

[BC/DR Exercise Letter of Attestation](https://trust.norm.ai/?requestAccessOpen=true&requestedResources=690941ee71921f33ed70c5c2)

[Penetration Test (2026H1) Executive Summary](https://trust.norm.ai/?requestAccessOpen=true&requestedResources=6a4be48c4770dedc8d12f4f9)

[SOC2 Bridge Letter](https://trust.norm.ai/?requestAccessOpen=true&requestedResources=69fcd3746e9c33c9ae0abbfc)

### Reports

[SOC2 Type II Report](https://trust.norm.ai/?requestAccessOpen=true&requestedResources=6909188ad9eb20a5440199ce)

### Whitepapers

Security Fact Sheet

### Other resources

[Chief Security Officer Bio](https://trust.norm.ai/?requestAccessOpen=true&requestedResources=69174ef0ffe71e2a6bc0c032)

[CAIQv4.1.0 Questionnaire Responses](https://trust.norm.ai/?requestAccessOpen=true&requestedResources=69fa804b3c20eb732139a4fb)

## Controls

Updated 1 minute ago

[**Infrastructure security**](https://trust.norm.ai/controls#infrastructure-security)

- Unique production database authentication enforced
- Encryption key access restricted
- Unique account authentication enforced

[**Organizational security**](https://trust.norm.ai/controls#organizational-security)

- Asset disposal procedures utilized
- Production inventory maintained
- Anti-malware technology utilized

[**Product security**](https://trust.norm.ai/controls#product-security)

- Data encryption utilized
- Control self-assessments conducted
- Penetration testing performed

[**Internal security procedures**](https://trust.norm.ai/controls#internal-security-procedures)

- Continuity and Disaster Recovery plans established
- Continuity and Disaster Recovery plans tested
- Cybersecurity insurance maintained

[**Data and privacy**](https://trust.norm.ai/controls#data-and-privacy)

- Data retention procedures established
- Customer data deleted upon leaving
- Data classification policy established

## Data collected

- Employee personally identifiable information
- Customer-specific content

## Subprocessors

Anthropic • LLM Infrastructure

Microsoft Azure • LLM Infrastructure

Open AI • LLM Infrastructure

## Ask Norm Ai a question

Request access to Norm Ai's Trust Center to access AI powered responses.

Vanta AI will index the resources in the Trust Center and provide a summarized answer to any compliance and security question.