Trust
Security & Data
Olympus is built for a HIPAA / legal-confidentiality context. This page describes its security and trust posture.
Private by design for AI
All AI processing runs through a BAA-covered, Zero-Data-Retention gateway — your data is never used to train models.
Encryption
Data is encrypted in transit (TLS / HSTS) and at rest (AES-256).
Access control
- Secure sign-in, with optional multi-factor authentication (MFA).
- Access is gated by an email-domain allowlist.
Data lifecycle
- Per-user isolation of stored data.
- Signed, expiring download links.
- Deletion on request.
Audit & sub-processors
- An append-only audit trail of security-relevant actions.
- Vetted sub-processors engaged under appropriate data-protection agreements.
This is a posture description, not a certification claim. For current attestations and detail, contact your account team.