This page covers SUPERWISE® security, data handling, subprocessors, and attestations. Every document below is available on request.
Certifications and attestations
| Item | Status |
|---|---|
| SOC 2 | SOC 2 audit underway (report expected Q1 2027) |
| ISO 27001 | Underway |
| Penetration testing | Annual third-party test; summary on request |
| HIPAA | SUPERWISE signs a BAA with covered entities; see the scope for healthcare. |
Request documents
A standard DPA, BAA template, annual third-party penetration test summary, and security questionnaire are available on request.
Request security documentsSecurity controls
- TLS for all communication
- Encryption at rest
- OAuth and SAML single sign-on
- Multi-factor authentication
Read the Security documentation.
Subprocessors
| Name | Purpose | Location |
|---|---|---|
| Google Cloud | Control plane; Sentinel metadata | us-central1 |
| Stripe | Billing | On request |
| HubSpot | Contact data | On request |
| 365 Data Centers | Hosts SUPERWISE's equipment for the hosted model in a secure cage | Nashville, Tennessee |
How each product handles data
Sentinel
Prompts and responses never go to SUPERWISE; operational metadata does. See the operational metadata field list. Admins can lock users' Pause with the all-users installer (ALLOWUSERPAUSE=0). See Sentinel for Windows.
Chat
The model is gpt-oss-120b, subject to change as models advance. Hosted by SUPERWISE in a secure cage at 365 Data Centers, Nashville, Tennessee. Conversations are kept for the life of the customer's account by default; admins can set a shorter period. Conversations are directly accessible only by the customer's administrator, and that access is an audited event. If SUPERWISE support needs access, that is also audited and the customer is notified. Content is not used to train someone else's model.
Platform (AMP)
Prompts stay in the customer's environment; configuration and metadata sync to the SUPERWISE control plane.
Deployment options
Enterprise offers Isolated SaaS and Private SaaS. SUPERWISE Chat can be deployed air-gapped as a custom installation with customer-chosen models. Sentinel and the platform are not air-gapped: prompts stay in the customer's environment; configuration and metadata sync to the SUPERWISE control plane.
Breach notification
Under a BAA, SUPERWISE notifies the customer of a breach within 72 hours.
Legal holds and subpoenas
SUPERWISE notifies the customer of a subpoena unless the law forbids it. SUPERWISE supports legal holds on request.
Company
SUPERWISE® is a trade name of Deep Insight Solutions, Inc., headquartered in Nashville, Tennessee. SUPERWISE was founded in 2017; the company acquired it in 2023 while doing business as Blattner Technologies, and took the SUPERWISE name. About SUPERWISE.