Security & Compliance
Enterprise-grade security built into every aspect of the MPL Risk platform.
Security documentation available under NDA.
Independent assurance
MPL Risk is SOC 2 Type I compliant and follows security best practices across data protection, access controls, and secure development practices. SOC 2 reports and additional security documentation are available upon request under NDA.
SOC 2 Type I
Third-party security assessments
Vulnerability management program
Secure SDLC
Security controls built for regulated environments
Data protection and encryption
- Encryption at rest using industry-standard key management
- Encryption in transit across all connections
- Secure secrets management and key rotation
Tenant isolation and governance
- Tenant-scoped isolation across data and workflows
- Role-based access controls and permissioning
- Audit-ready activity and access logging
Identity and access controls
- SSO support (SAML) and granular RBAC
- Strong authentication and session controls
- Administrative controls for secure access governance
Infrastructure and operational security
- Secure cloud infrastructure with network protections
- Monitoring, alerting, and rate limiting
- Regular security assessments and penetration testing
AI security and data governance
MPL Risk is designed to support regulated organizations adopting AI while maintaining strict security and privacy controls. Customer data is not used to train models. AI inference is performed through secure, SOC 2–aligned infrastructure with encrypted communication.
No training on customer data
Your data remains private and is never used for model training
Encrypted inference channels
All AI inference happens through secure, encrypted connections
Controls aligned to regulated environments
Built for organizations with strict compliance requirements
Additional architecture and security documentation available under NDA.
Flexible deployment options
Support for security and data residency requirements.
Cloud SaaS
- Standard enterprise deployment
- Secure tenant isolation
Hybrid processing
- Support for customer-managed environments
- Controlled data flows
On-premise options
- Available for strict requirements
- Aligned with enterprise IT policies
Security FAQ
Need security documentation?
Request our SOC 2 report, security overview, and architecture brief under NDA.
Last updated: January 2026