Security

Agrimi is a compliance platform. We hold ourselves to the same standards we help our customers meet. This page describes the security practices we follow to protect your data.

Infrastructure

• Hosted on infrastructure with SOC 2 Type II certification
• All environments are isolated by customer
• Production infrastructure is deployed in the United States

Encryption

• All data in transit is encrypted via TLS 1.2 or higher
• All data at rest is encrypted using AES-256
• Database backups are encrypted and stored in a separate region

Access controls

• Role-based access control within the platform
• Employee access to production systems requires multi-factor authentication
• Access to customer data is restricted to essential personnel and logged
• We follow the principle of least privilege across all systems

Application security

• Dependencies are monitored for known vulnerabilities
• We perform regular security reviews of application code
• Authentication tokens are short-lived and securely stored

Data handling

• Customer Data is never used to train AI models
• We do not share Customer Data with third parties except as described in our Privacy Policy
• Upon account termination, Customer Data is deleted within 30 days of the data export window

Incident response

We maintain an incident response plan and will notify affected customers within 72 hours of confirming a data breach. Security incidents are reviewed, documented, and used to improve our controls.

Responsible disclosure

If you discover a security vulnerability in Agrimi, we ask that you report it responsibly. Please email security@agrimigrc.com with a description of the issue. We will acknowledge your report within 2 business days and work to resolve confirmed vulnerabilities promptly. We ask that you not publicly disclose the issue until we have had a reasonable opportunity to address it.

Questions

For security-related questions, contact security@agrimigrc.com.

Agrimi, Inc. · Florida, United States