All systems operational

Security is not a feature.
It's the foundation.

Hermes is built for teams that handle sensitive customer data. Zero data persistence, read-only connections, and human oversight at every step.

Talk to Security TeamLearn More
SOC 2 Type II

SOC 2 Type II

In Progress

GDPR

GDPR

Compliant

ISO 27001

ISO 27001

Planned

256-bit TLS

256-bit TLS

Active

SECURITY PRINCIPLES

Your data never leaves your control.

We never train on it. You can delete everything, anytime.

Zero Data Persistence

Zero Data Persistence

We never store your customer data. Context is processed in memory and discarded immediately after generation. Your database connections are read-only — we can't modify your source data even if we wanted to.

Read-only connections only
AES-256 Encryption

AES-256 Encryption

All data in transit is encrypted with TLS 1.3. Credentials and secrets are encrypted at rest using AES-256 — the same standard used by banks and government institutions.

Bank-grade encryption
Human Oversight

Human Oversight

Nothing executes without your explicit approval. Every AI-recommended action requires manual review by default. Autopilot mode is opt-in and limited to proven, low-risk playbooks.

Approve before anything sends
Immutable Audit Logs

Immutable Audit Logs

Every AI decision, data fetch, generated draft, and executed action is logged with complete, tamper-proof tracing. Export logs anytime for compliance reviews.

Full traceability

DATA ARCHITECTURE

How your data flows through Hermes

Every step is designed with security as the primary constraint.

01

Read-Only Connection

Hermes connects to your database, CRM, and tools using scoped, read-only credentials. We never write to your systems.

02

In-Memory Processing

Customer context is processed in memory to generate signals and recommendations. No raw data is persisted to disk.

03

Human Review Gate

Every recommended action surfaces in your dashboard for review. Nothing executes until you explicitly approve it.

04

Secure Execution

Approved actions are executed over encrypted channels. Every action is logged with a complete audit trail.

Security FAQ

Common questions about how Hermes handles your data.

No. Customer context is processed in memory and discarded immediately after generating signals and recommendations. We never persist your raw customer data to disk.
No. All connections are read-only or scoped to the minimum required permissions. Hermes cannot write to, modify, or delete your source data.
Only authenticated members of your workspace. Actions are scoped to your organization and visible only to users with appropriate roles and permissions.
You can delete all your data from the Settings page at any time. Deletion is immediate and permanent — we don't retain backups of customer data.
Never. Your data is never used for model training. We use commercial AI models with strict data processing agreements that prohibit training on customer inputs.

Have security questions?

Our team is happy to walk through our security architecture, provide compliance documentation, or answer any specific concerns.

Talk to Our Team