generated: '2026-10-07' method: searched probe: true source: https://www.vaquill.ai/security url: https://www.vaquill.ai/security name: Vaquill AI Trust Center certifications: [] certifications_note: 'The Trust Center lists NO held certification: "ISO 27001 - On Roadmap - Not currently certified. We track ISO 27001 controls internally and may pursue certification in future." It states "No certifications are listed here that we do not hold or are not actively pursuing." A prior script run recorded ISO 27001 as a certification from a keyword match; corrected 2026-10-07.' attestations: - name: HIPAA Business Associate Agreement status: Available on Request note: A Business Associate Agreement is available for firms handling protected health information - name: GDPR / UK GDPR data-subject assistance status: Live source: https://www.vaquill.ai/dpa - name: US state privacy laws (CCPA/CPRA, VCDPA, CPA, CTDPA, TDPSA, UCPA) status: Live note: We honor consumer rights under California, Virginia, Colorado, Connecticut, Texas, and Utah privacy laws - name: ISO 27001 status: On Roadmap note: Not currently certified - name: Annual third-party audit summaries status: Committed in the DPA note: customers may request a written security-questionnaire response or a summary of our internal security reviews in the meantime controls: - AES-256 encryption at rest - TLS 1.3 in transit - Managed KMS keys with automatic rotation - Row-level security on every database query and object-store read (tenant isolation) - PII anonymized before the model sees it - Zero-data-retention agreements with LLM providers - No training on customer data - US data residency (AWS US regions) - Incident notification within 72 hours dpa: https://www.vaquill.ai/dpa privacy: https://www.vaquill.ai/privacy contact: contact@vaquill.ai evidence: - source: https://www.vaquill.ai/security keywords: - trust center - ISO 27001 On Roadmap Not currently certified - HIPAA (BAA) Available on Request - GDPR - zero data retention - US data residency