AI customer support your security team will sign off on
Lorikeet is built for regulated industries: independently audited, transparent by design and fully auditable, with every certification published on our public Trust Center.
Independently audited. Transparent by design.
Certifications
SOC 2 Type II, ISO 27001:2022, HIPAA and GDPR
All four are independently verified, published on our public Vanta Trust Center with reports downloadable under NDA, and refreshed annually. We sign Business Associate Agreements for healthcare customers.
Data protection
Your data is never used to train AI models
Zero-data-retention agreements with all model vendors and no fine-tuning on customer data. Personally identifiable information is automatically redacted, protected health information is handled minimum-necessary, and everything is encrypted with TLS 1.3 in transit and AES-256 at rest.
Infrastructure
Google Cloud, private VPC, tenant isolation
Hosted on Google Cloud Platform with no public internet access to production, row-level-security tenant isolation, Google SSO with hardware-key MFA, and third-party penetration testing.
Every decision your AI makes is auditable
Every customer interaction, model choice and action is tracked and fully explainable, not a black box. Runtime guardrails detect sensitive topics and escalate to your team, and Coach quality-scores every conversation, human or AI.
Frequently asked questions
What security certifications does Lorikeet hold?
SOC 2 Type II, ISO 27001:2022, HIPAA and GDPR, all independently verified and published on our public Trust Center at trust.lorikeetcx.ai, where reports can be downloaded under NDA.
Does Lorikeet sign Business Associate Agreements?
Yes. Lorikeet is HIPAA compliant and signs BAAs for healthcare customers, with PHI handled on a minimum-necessary basis and automatically redacted.
Does Lorikeet train AI models on our data?
Never. Lorikeet holds zero-data-retention agreements with all model vendors and does not fine-tune models on customer data.
Where is our data hosted and can we choose residency?
Production runs on Google Cloud Platform in a private VPC with US primary hosting, and data storage residency is available in Australia and the EU. Everything is encrypted with TLS 1.3 in transit and AES-256 at rest.
Who are Lorikeet’s sub-processors?
Core sub-processors include Google Cloud Platform, OpenAI, Anthropic and Baseten, with the complete, current list maintained on our public Trust Center.
