Security at Menna AI

Enterprise-Grade Protection

At Menna AI, trust is our #1 priority. We understand that our customers entrust us with their most valuable data. That's why we've built our infrastructure from the ground up with security, compliance, and privacy at its core.

Data Security & Encryption

• Encryption in Transit: All data sent to or from our infrastructure is encrypted in transit via industry best-practices using Transport Layer Security (TLS) 1.2 or higher.
• Encryption at Rest: All customer data is encrypted at rest using AES-256 encryption. We use secure key management services to protect encryption keys.
• Data Isolation: Customer data is logically separated at the tenant level to prevent cross-contamination or unauthorized access between accounts.

Infrastructure Security

• Cloud Security: Our application is hosted on enterprise-grade cloud providers that maintain strict physical and environmental security controls.
• Network Protection: We utilize advanced firewalls, DDoS mitigation, and intrusion detection systems to protect against network-level attacks.
• Vulnerability Management: We perform regular automated vulnerability scanning across our infrastructure and applications.

Access Control & Authentication

• Role-Based Access Control (RBAC): We enforce the principle of least privilege. Employees are only granted access to systems necessary for their specific roles.
• Multi-Factor Authentication (MFA): MFA is required for all employee access to internal systems and production environments.
• Audit Logging: Comprehensive audit logs are maintained for all access to sensitive systems and customer data.

Compliance & Certifications

We are continuously working to maintain and expand our compliance posture. Our security program is designed to align with industry standard frameworks such as SOC 2 and ISO 27001. We conduct regular internal audits and work with independent third-party auditors to validate our security controls.

Incident Response

We maintain a comprehensive Incident Response Plan that is tested regularly. In the event of a security incident, our dedicated security team follows strict protocols for containment, eradication, recovery, and customer notification.

Reporting a Security Issue

If you believe you have found a security vulnerability in Menna AI's systems, please contact our security team immediately at security@www.mennaai.com.