Security and trust
Your contracts are sensitive. We treat them that way.
Aavenir encrypts contract data at rest and in transit, controls access by role, and is SOC 2 Type II compliant and ISO/IEC 27001:2022 certified. Customer contract data is never used to train external AI models.
Definition
How does Aavenir secure contract data?
Aavenir secures contract data with AES-256 encryption at rest, TLS 1.2 or higher in transit, role based access, audit logging and single sign-on, backed by an independent SOC 2 Type II audit and ISO/IEC 27001:2022 certification.
On ServiceNow deployments, storage, backups and retention follow ServiceNow policies and SLAs, so contract data stays under the controls your platform team already runs. How each deployment model works is on deployment options.
- AES-256 at rest, TLS 1.2+ in transit
- SSO through OAuth 2.0 and SAML, with role based access and audit logging
- Regular VAPT, open source library scans and white box testing
- SOC 2 Type II compliant, ISO/IEC 27001:2022 certified in the USA and India
- Customer contract data never trains external AI models
Privacy
Data privacy by design.
Only the data we need
Aavenir does not collect or keep customer data it does not need to run the service.
Encrypted everywhere
Contract data is encrypted with AES-256 at rest and travels over TLS 1.2 or higher.
Your retention rules
On ServiceNow, storage, backups and retention follow ServiceNow policies and SLAs, the same ones that govern the rest of your instance.
Security controls
Controls at every layer, from cloud to login.
Cloud security
Two-factor authentication, firewalls and security groups protect the cloud environment that runs Aavenir.
Product security
Regular vulnerability assessment and penetration testing (VAPT), open source library scans and white box testing, aligned with SOC 2.
Access control
Role based access, audit logging of user activity, and single sign-on through OAuth 2.0 and SAML.
Compliance
Independently audited, and certified.
Controls tested over time
A SOC 2 Type II report covers how Aavenir's controls for security, availability, confidentiality, integrity and privacy operated over an audit period, not just on one day.
Read the SOC 2 announcementA certified security management system
Aavenir's information security management system is certified to ISO/IEC 27001:2022 in the USA and India.
Read the ISO announcement
Responsible AI
AI that shows its work, on data that stays yours.
Customer contract data is never used to train external models. Aavenir AI is built for interpretability and fairness: each finding points to the clause and the playbook position behind it.
A person approves every AI result before it changes a contract, a score or a payment, and the audit history records both the suggestion and the decision.
Meet AvyNext step
Running a vendor security review?
Tell us what your security team needs, and we will route the request to the right people.
Contact UsFrequently asked questions (FAQ)
Common questions
Is Aavenir SOC 2 Type II compliant?
Yes. Aavenir has completed a SOC 2 Type II audit covering security, availability, confidentiality, integrity and privacy. The announcement explains the scope and what it means for the customer data held in Aavenir apps. Read the SOC 2 Type II announcement.
Is Aavenir ISO 27001 certified?
Yes. Aavenir is certified to ISO/IEC 27001:2022, the current version of the international standard for information security management, with certification covering the USA and India. Read the ISO/IEC 27001:2022 announcement.
Does Aavenir use my contracts to train AI models?
No. Customer contract data is never used to train external AI models. Aavenir AI reads your contracts to review, extract and answer questions for your team, and a person approves every result it produces before anything changes. Learn how Aavenir AI works.
How does Aavenir handle single sign-on and access?
Aavenir supports single sign-on through OAuth 2.0 and SAML, controls access by role, and logs user activity for audit. On ServiceNow, the apps use the users and roles your instance already has. See how it runs on ServiceNow.
Have a question we have not answered? Ask the Expert
Schedule a demo
See your contracts run on one record.
- 1 A 30 minute walkthrough Built around your team, whether that is procurement, legal, IT or finance.
- 2 Your contracts, not ours Bring a few sample agreements and watch Aavenir AI extract and review them.
- 3 ServiceNow or standalone We show the deployment that fits the systems you already run.
Prefer to talk first? Contact the team.
The form did not load. Contact the team instead, or refresh the page.