Trust & compliance
Certifications in process — SSO-ready delivery
AlterAI is a software product company running a pure AI Agentic platform. We are working through ISO, GDPR, and cybersecurity certifications applicable to our business. Enterprise builds support SSO. We never pretend papers we do not yet hold.
In process
Honest status — not marketing theatre.
ISO 27001
Information security management — we are in process of obtaining certification applicable to our software product company.
Status: in process
GDPR readiness
Data protection practices aligned to GDPR for EU and UK engagements — formal certification / attestation in process where applicable.
Status: in process
Cybersecurity frameworks
Controls mapped to common CySec expectations for software businesses (access, logging, change control). Certification path in process — not claimed as complete.
Status: in process
Documentation & audit trails
GDP-minded documentation, RLS, audit logs, and human-in-the-loop gates already ship in production builds — the formal certs follow.
Status: in process
SSO integration
Delivery capability for the apps we build for you.
- SAML and OIDC SSO for client enterprise apps we build
- Role-based access with portal visibility for stakeholders
- Integration with your IdP (Okta, Azure AD, Google Workspace, and similar)
- Scoped credentials for agents — never blanket admin access
Need SSO or a compliance-minded architecture for your product? Start with outcome discovery on pricing or talk to the sales agent.
FAQ
Are you ISO / GDPR / CySec certified today?
No. We are in process of obtaining the certifications applicable to a software product company. We do not claim completed certification on marketing pages.
What security is live in builds today?
RLS, scoped credentials, guardrails, audit logs, human-in-the-loop approvals, and single-tenant options — SOC 2-ready architecture patterns, not a completed SOC 2 report.
Can you integrate SSO?
Yes. Enterprise builds can integrate SAML/OIDC SSO with your identity provider. That is a delivery capability for client apps — ask in discovery.