Trust Center · Security
Our security posture, without the theater
Security pages love completed-looking badges. Ours states the honest status of each assurance, including the ones still underway.
Assurance status
Independent security examination
A SOC 2 Type II examination is in progress: the observation window is underway and the report is expected in Q4 2026. No completed SOC 2 report exists today.
Independent penetration test
An independent penetration test is planned. After it is complete, a summary will be available to schools and districts under NDA. Until then, AIVO does not claim independent security testing.
What is in place today
Transport and storage protection
Connections to AIVO services use TLS with insecure connections redirected, and uploaded learner documents and attachments are stored with AES-256 server-side encryption.
Role-scoped access
Every read of learner data is scoped by the reader's relationship to the learner, enforced server-side.
Least-privilege operations
Production access is limited, logged, and reviewed. Support workflows never require broad data access.
Continuous dependency scanning
The supply chain is scanned continuously, with security gates in the release pipeline.
Security questions welcome
Institutional security reviews can request our current documentation through a discovery call.