SOC 2 TYPE II & ISO 27001 ARCHITECTURE

Security & Governance Overview

DataSmart Technology Inc. | High-Security Agentic Runtime

1. Encryption & Key Isolation

All agent state memory, tool API credentials, and LLM payloads are encrypted in transit using TLS 1.3 and at rest using AES-256 with hardware KMS keys. DataSmart staff never have access to unencrypted customer payloads.

2. Continuous Telemetry & Audit Ledgers

Every single ReAct reasoning step, tool call, and state transition is logged to an immutable append-only audit ledger for compliance auditing and forensic explainability.

3. SOC 2 Type II Certification

VEXA Platform undergoes annual independent SOC 2 Type II third-party audits evaluating Security, Confidentiality, and Availability trust service criteria.