Trust & Security
ProjectMaster AI is built with security, compliance, and governance at its core. Our platform follows security controls aligned with the AICPA Trust Services Criteria (SOC 2).
Compliance Status
ProjectMaster AI maintains a SOC 2–aligned security posture. Our architecture was designed with auditability, immutability, and governance from day one. Formal SOC 2 Type I and Type II audits are planned.
Important: References to SOC 2 alignment describe internal controls and processes designed to meet the AICPA Trust Services Criteria. These references do not represent formal SOC 2 certification until audit completion.
Documentation: Detailed SOC 2 reports and audit artifacts are available under NDA upon request.
Security Architecture
Built on enterprise-grade infrastructure with defense-in-depth principles, continuous monitoring, and automated security controls.
Granular role-based access control (RBAC) with project-level isolation, invitation-based access, and least-privilege enforcement.
Immutable audit trails capturing all system events, user actions, and administrative changes with timestamps and attribution.
End-to-end encryption for data in transit (TLS 1.3) and at rest (AES-256). Secure key management and regular security assessments.
24/7 system monitoring, automated alerting, documented incident response procedures, and post-incident review processes.
AI outputs are advisory only. Launch decisions require human certification, signature approval, and stakeholder accountability.
Compliance Alignment
SOC 2 Alignment
Controls aligned with AICPA Trust Services Criteria
Access Reviews
Formal user access reviews conducted quarterly
Change Control
Scope lock, re-certification triggers, and audit trails
Data Residency
Primary infrastructure hosted in United States
Penetration Testing
Third-party security assessments conducted annually
GDPR Readiness
Data subject rights, retention policies, and privacy controls
Trust Services Criteria Coverage
Security
Protection against unauthorized access through role-based controls, project-scoped access, invitation-based provisioning, and immutable audit logs.
Availability
System availability monitoring, controlled releases, incident response procedures, and business continuity planning.
Processing Integrity
Launch readiness validation gates, required approvals before execution, locked scope after certification, and immutable launch decision records.
Confidentiality
Permission-based access, project-level isolation, export controls, and role-limited visibility ensure confidential data is protected.
Privacy
Limited personal data collection, user-controlled accounts, account deletion capability, and transparent privacy practices.
AI Governance & Human Oversight
ProjectMaster AI uses artificial intelligence to assist with project planning, risk analysis, and decision support. However, all AI outputs are advisory only.
Human-in-the-Loop Requirements
- Launch decisions require human certification and signature approval
- Risk acceptance requires named decision-maker acknowledgment
- Scope changes trigger re-certification workflows
- All critical actions are logged with user attribution
We do not train AI models on customer project data without explicit consent. Customer data is never sold or shared with third parties.
Enterprise Security Inquiries
For detailed SOC 2 reports, security questionnaires, or compliance documentation, please contact our security team.
Security Contact: synxcs@gmail.com
Documentation: Available under NDA upon request
Response Time: 24-48 hours for enterprise inquiries