Security, Trust & Transparency

# Enterprise-grade security. Zero compromise on control.

[Request a demo](/request-demo)[Trust center](https://trust.skan.ai/)

![Padlock](https://cdn.sanity.io/images/3xg3qj5k/production/c361c58d4975bdc18c757415da2d8a2bc4ef9822-300x300.svg)

Trusted by

![Dell Technologies](https://cdn.sanity.io/images/3xg3qj5k/production/5addcfa374a95dde592d9dedd12cca7afca0ec02-157x20.svg)

![Dell Technologies](https://cdn.sanity.io/images/3xg3qj5k/production/5addcfa374a95dde592d9dedd12cca7afca0ec02-157x20.svg)

![Mitie](https://cdn.sanity.io/images/3xg3qj5k/production/a33fe031558dfbba74a72673541b0f4878d23f39-81x23.svg)

![Mitie](https://cdn.sanity.io/images/3xg3qj5k/production/a33fe031558dfbba74a72673541b0f4878d23f39-81x23.svg)

![Definiti](https://cdn.sanity.io/images/3xg3qj5k/production/3cc41e18f1406ad305f4131e61df6b6755aa8399-146x18.svg)

![Definiti](https://cdn.sanity.io/images/3xg3qj5k/production/3cc41e18f1406ad305f4131e61df6b6755aa8399-146x18.svg)

![Infoniqa](https://cdn.sanity.io/images/3xg3qj5k/production/526db23977c5023abfae3b20a2360a72a4c94872-107x18.svg)

![Infoniqa](https://cdn.sanity.io/images/3xg3qj5k/production/526db23977c5023abfae3b20a2360a72a4c94872-107x18.svg)

![Nistrn](https://cdn.sanity.io/images/3xg3qj5k/production/669530e00c95a815dcecfbbddfae856d1a6c11ea-120x24.svg)

![Nistrn](https://cdn.sanity.io/images/3xg3qj5k/production/669530e00c95a815dcecfbbddfae856d1a6c11ea-120x24.svg)

![unum](https://cdn.sanity.io/images/3xg3qj5k/production/97723457a3a7f2ddd502c044bbc039aedd4ba438-80x27.svg)

![unum](https://cdn.sanity.io/images/3xg3qj5k/production/97723457a3a7f2ddd502c044bbc039aedd4ba438-80x27.svg)

![capita](https://cdn.sanity.io/images/3xg3qj5k/production/51876f6643341b1b7757d7a23d420bcf31ed48d5-82x26.svg)

![capita](https://cdn.sanity.io/images/3xg3qj5k/production/51876f6643341b1b7757d7a23d420bcf31ed48d5-82x26.svg)

![Blackbox](https://cdn.sanity.io/images/3xg3qj5k/production/f6ce84e4847eae5871a8047c169262bd497fffb9-121x16.svg)

![Blackbox](https://cdn.sanity.io/images/3xg3qj5k/production/f6ce84e4847eae5871a8047c169262bd497fffb9-121x16.svg)

![Brillio](https://cdn.sanity.io/images/3xg3qj5k/production/28de81724b4cd03ea6a932c5ae645b0dc95f8ceb-85x36.svg)

![Brillio](https://cdn.sanity.io/images/3xg3qj5k/production/28de81724b4cd03ea6a932c5ae645b0dc95f8ceb-85x36.svg)

![Pathstone](https://cdn.sanity.io/images/3xg3qj5k/production/ce993ba474164ee96889b6e73b2826c4abe7bed5-120x22.svg)

![Pathstone](https://cdn.sanity.io/images/3xg3qj5k/production/ce993ba474164ee96889b6e73b2826c4abe7bed5-120x22.svg)

![Reflect](https://cdn.sanity.io/images/3xg3qj5k/production/56df3f0b8c3fd25ecf7e28af22911ae3ad1c1ab1-105x39.svg)

![Reflect](https://cdn.sanity.io/images/3xg3qj5k/production/56df3f0b8c3fd25ecf7e28af22911ae3ad1c1ab1-105x39.svg)

![Dell Technologies](https://cdn.sanity.io/images/3xg3qj5k/production/5addcfa374a95dde592d9dedd12cca7afca0ec02-157x20.svg)

![Dell Technologies](https://cdn.sanity.io/images/3xg3qj5k/production/5addcfa374a95dde592d9dedd12cca7afca0ec02-157x20.svg)

![Mitie](https://cdn.sanity.io/images/3xg3qj5k/production/a33fe031558dfbba74a72673541b0f4878d23f39-81x23.svg)

![Mitie](https://cdn.sanity.io/images/3xg3qj5k/production/a33fe031558dfbba74a72673541b0f4878d23f39-81x23.svg)

![Definiti](https://cdn.sanity.io/images/3xg3qj5k/production/3cc41e18f1406ad305f4131e61df6b6755aa8399-146x18.svg)

![Definiti](https://cdn.sanity.io/images/3xg3qj5k/production/3cc41e18f1406ad305f4131e61df6b6755aa8399-146x18.svg)

![Infoniqa](https://cdn.sanity.io/images/3xg3qj5k/production/526db23977c5023abfae3b20a2360a72a4c94872-107x18.svg)

![Infoniqa](https://cdn.sanity.io/images/3xg3qj5k/production/526db23977c5023abfae3b20a2360a72a4c94872-107x18.svg)

![Nistrn](https://cdn.sanity.io/images/3xg3qj5k/production/669530e00c95a815dcecfbbddfae856d1a6c11ea-120x24.svg)

![Nistrn](https://cdn.sanity.io/images/3xg3qj5k/production/669530e00c95a815dcecfbbddfae856d1a6c11ea-120x24.svg)

![unum](https://cdn.sanity.io/images/3xg3qj5k/production/97723457a3a7f2ddd502c044bbc039aedd4ba438-80x27.svg)

![unum](https://cdn.sanity.io/images/3xg3qj5k/production/97723457a3a7f2ddd502c044bbc039aedd4ba438-80x27.svg)

![capita](https://cdn.sanity.io/images/3xg3qj5k/production/51876f6643341b1b7757d7a23d420bcf31ed48d5-82x26.svg)

![capita](https://cdn.sanity.io/images/3xg3qj5k/production/51876f6643341b1b7757d7a23d420bcf31ed48d5-82x26.svg)

![Blackbox](https://cdn.sanity.io/images/3xg3qj5k/production/f6ce84e4847eae5871a8047c169262bd497fffb9-121x16.svg)

![Blackbox](https://cdn.sanity.io/images/3xg3qj5k/production/f6ce84e4847eae5871a8047c169262bd497fffb9-121x16.svg)

![Brillio](https://cdn.sanity.io/images/3xg3qj5k/production/28de81724b4cd03ea6a932c5ae645b0dc95f8ceb-85x36.svg)

![Brillio](https://cdn.sanity.io/images/3xg3qj5k/production/28de81724b4cd03ea6a932c5ae645b0dc95f8ceb-85x36.svg)

![Pathstone](https://cdn.sanity.io/images/3xg3qj5k/production/ce993ba474164ee96889b6e73b2826c4abe7bed5-120x22.svg)

![Pathstone](https://cdn.sanity.io/images/3xg3qj5k/production/ce993ba474164ee96889b6e73b2826c4abe7bed5-120x22.svg)

![Reflect](https://cdn.sanity.io/images/3xg3qj5k/production/56df3f0b8c3fd25ecf7e28af22911ae3ad1c1ab1-105x39.svg)

![Reflect](https://cdn.sanity.io/images/3xg3qj5k/production/56df3f0b8c3fd25ecf7e28af22911ae3ad1c1ab1-105x39.svg)

Skan AI captures the shape of work. Private by design, and proven against the strictest enterprise security requirements.

Skan AI captures the shape of work. Private by design, and proven against the strictest enterprise security requirements.

-   ![soc](https://cdn.sanity.io/images/3xg3qj5k/production/d33f4ae0a52b897fdf2d7297bfd14653222da519-62x62.svg)
    
    ![soc](https://cdn.sanity.io/images/3xg3qj5k/production/d33f4ae0a52b897fdf2d7297bfd14653222da519-62x62.svg)
    
    Security & availability
    
-   ![Information security](https://cdn.sanity.io/images/3xg3qj5k/production/600af9c049422659a6c3a49f55c82b0944bb8f2b-62x64.svg)
    
    ![Information security](https://cdn.sanity.io/images/3xg3qj5k/production/600af9c049422659a6c3a49f55c82b0944bb8f2b-62x64.svg)
    
    Information security
    
-   ![Data protection](https://cdn.sanity.io/images/3xg3qj5k/production/16bca3bce21d277a2750a842902f3400a81426bd-81x81.svg)
    
    ![Data protection](https://cdn.sanity.io/images/3xg3qj5k/production/16bca3bce21d277a2750a842902f3400a81426bd-81x81.svg)
    
    Data protection
    
-   ![Healthcare data](https://cdn.sanity.io/images/3xg3qj5k/production/b85d1ed9e80d47535f2d9a473383af76f77985ec-101x54.svg)
    
    ![Healthcare data](https://cdn.sanity.io/images/3xg3qj5k/production/b85d1ed9e80d47535f2d9a473383af76f77985ec-101x54.svg)
    
    Healthcare data
    
-   ![California privacy](https://cdn.sanity.io/images/3xg3qj5k/production/838533082efa11f8d231081448496b0cd91b666f-80x80.svg)
    
    ![California privacy](https://cdn.sanity.io/images/3xg3qj5k/production/838533082efa11f8d231081448496b0cd91b666f-80x80.svg)
    
    California privacy
    
-   ![iso 42001](https://cdn.sanity.io/images/3xg3qj5k/production/d76dce3f6bbedfcdfcbbfd3eb770d615dc03129d-120x120.svg)
    
    ![iso 42001](https://cdn.sanity.io/images/3xg3qj5k/production/d76dce3f6bbedfcdfcbbfd3eb770d615dc03129d-120x120.svg)
    
    Artificial Intelligence
    

## Choose what Skan AI observes, and what it doesn’t

What Skan AI observesWhat Skan AI never captures

What Skan AI observes

What Skan AI never captures

![What SkanAI never captures](https://cdn.sanity.io/images/3xg3qj5k/production/55dc26e1e2a2752855b4984fdf77788de0eb5d86-2576x1282.jpg?q=80&fit=max&auto=format)

![icon](https://cdn.sanity.io/images/3xg3qj5k/production/23969a83a3000130efdec0d4a5f4ffa2b20fa23b-32x32.svg)

Application usage and switching patterns.

![icon](https://cdn.sanity.io/images/3xg3qj5k/production/23969a83a3000130efdec0d4a5f4ffa2b20fa23b-32x32.svg)

Time allocation by process and task type.

![icon](https://cdn.sanity.io/images/3xg3qj5k/production/23969a83a3000130efdec0d4a5f4ffa2b20fa23b-32x32.svg)

Workflow sequences and decision paths.

![icon](https://cdn.sanity.io/images/3xg3qj5k/production/23969a83a3000130efdec0d4a5f4ffa2b20fa23b-32x32.svg)

Process variants and exception paths.

![icon](https://cdn.sanity.io/images/3xg3qj5k/production/23969a83a3000130efdec0d4a5f4ffa2b20fa23b-32x32.svg)

Application names and interaction metadata.

-   [Data security](/security-trust-and-transparency#security)
-   [Certifications and compliance](/security-trust-and-transparency#certifications)
-   [Privacy](/security-trust-and-transparency#privacy)
-   [AI ethics](/security-trust-and-transparency#ethics)

Built for the security review you'll need to pass

## Built for the security review you'll need to pass

Data security

## Built to protect enterprise  
operations at every layer

-   ### Full encryption
    
    All data encrypted in transit using TLS 1.2+, and at rest using AES-256. Keys are managed to industry best practice and rotated regularly.
    
-   ### Zero-trust access model
    
    Role-based access controls throughout, with no standing privileged access. Every access request is time-limited, logged and reviewable.
    
    ![Zero Trust](https://cdn.sanity.io/images/3xg3qj5k/production/d8384e4e746e5d67b94ff8fb0ae1972e0077f49b-1320x550.png?q=80&fit=max&auto=format)
    
-   ### Infrastructure security
    
    Hosted on enterprise-grade cloud infrastructure, with each customer in a private environment. Penetration tested regularly by independent third parties.
    
-   ### Vulnerability management
    
    Continuous monitoring, regular patching and a responsible disclosure program. Security incidents follow a defined response protocol, with customer notification SLAs built in.
    
    ![Vulnerability](https://cdn.sanity.io/images/3xg3qj5k/production/b048aee873c1ee431041ef48c913f47aec3a15f1-1320x550.png?q=80&fit=max&auto=format)
    

Certifications and compliance

## Aligned to the standards  
enterprise businesses rely on

Certifications

-   SOC 2 Type II
    
    ![AICPA](https://cdn.sanity.io/images/3xg3qj5k/production/e9dfe1696393993e1bdc9b8f30700cd0797ccce5-120x120.svg)
    
    ![AICPA](https://cdn.sanity.io/images/3xg3qj5k/production/e9dfe1696393993e1bdc9b8f30700cd0797ccce5-120x120.svg)
    
    Independently audited annually for security, availability, and confidentiality by an accredited third party.
    
-   ISO 27001
    
    ![ISO 27001](https://cdn.sanity.io/images/3xg3qj5k/production/d62d105ab784e91f1801a1ab9f82dcfedb9c70c7-118x120.svg)
    
    ![ISO 27001](https://cdn.sanity.io/images/3xg3qj5k/production/d62d105ab784e91f1801a1ab9f82dcfedb9c70c7-118x120.svg)
    
    The international standard for information security management. Certified by an accredited third-party body.
    
-   ISO 42001
    
    ![ISO 42001](https://cdn.sanity.io/images/3xg3qj5k/production/c2c76cb8198f3b1cdd22a21e100ba1db996e4fa5-120x120.svg)
    
    ![ISO 42001](https://cdn.sanity.io/images/3xg3qj5k/production/c2c76cb8198f3b1cdd22a21e100ba1db996e4fa5-120x120.svg)
    
    The international standard for AI management systems. Certified by an accredited third-party body.
    

Regulatory Frameworks

-   ![GDPR](https://cdn.sanity.io/images/3xg3qj5k/production/1c59c80484fa3990125da0a8d0c072a01feb9596-81x81.svg)
    
    ### GDPR
    
    Built to comply with the EU's General Data Protection Regulation. Lawful basis, data minimisation and the right to erasure are all built into the platform.
    
-   ![CCPA](https://cdn.sanity.io/images/3xg3qj5k/production/e6f4321f09fd14e5c01907fc04e03d29a5acc37f-80x80.svg)
    
    ### CCPA
    
    California Consumer Privacy Act compliance for customers operating in California or with California-resident data.
    
-   ![HIPAA](https://cdn.sanity.io/images/3xg3qj5k/production/f0c9988dc4cd1c84efe1f8e76ac7260d19cd9a60-151x80.svg)
    
    ### Industry-specific
    
    HIPAA-ready for healthcare deployments. PCI-aware for financial services. The platform supports the frameworks that govern your industry.
    

Privacy

## Privacy controls designed  
around how work is observed

![Privacy Controls](https://cdn.sanity.io/images/3xg3qj5k/production/609d05cde0634263800918f11ef52288e84ca323-2640x1096.png?q=80&fit=max&auto=format)

-   Data minimization
    
    Skan AI captures only what's needed to model how work happens. Data is retained only as long as its stated purpose requires.
-   Right to erasure
    
    Individual data can be deleted on request, with a full audit of what's been captured, retained and removed. Yours to inspect at any time.
-   Retention controls
    
    Customer-defined retention periods for every category of captured data, with automated deletion the moment a retention period expires.
-   Whitelist controls
    
    Customers control which applications are observed and which are excluded. Personal apps, sensitive systems, anything off-limits. Set the rules, and Skan AI respects them.

AI ethics

## Operational intelligence built with  
accountability and human oversight

-   ![Human oversight](https://cdn.sanity.io/images/3xg3qj5k/production/4d25f71be2319c1fb031a4c957ed2a098632116e-660x322.svg)
    
    ### Human oversight
    
    Skan AI supports human decision-making, not autonomous decision-making. Recommendations are always reviewed and approved by experts.
    
-   ![Recommendation transparency](https://cdn.sanity.io/images/3xg3qj5k/production/ba32911c6bde3b45711524bab03257ed76e2f590-660x322.svg)
    
    ### Recommendation transparency
    
    Every recommendation is traceable back to the data behind it, so teams can understand why it was made and review the supporting context.
    
-   ![Icon](https://cdn.sanity.io/images/3xg3qj5k/production/e8605089e46c0bd0fdd99f3db3ab303bc9e316e6-45x46.svg)
    
    ### Bias mitigation
    
    Models and recommendations are regularly reviewed and tested to identify potential bias across workflows, teams and operational environments.
    
-   ![Icon](https://cdn.sanity.io/images/3xg3qj5k/production/e8605089e46c0bd0fdd99f3db3ab303bc9e316e6-45x46.svg)
    
    ### Responsible deployment
    
    Customers control how Skan AI is deployed within their organization, including communication, governance and operational policies.
    
-   ![Icon](https://cdn.sanity.io/images/3xg3qj5k/production/e8605089e46c0bd0fdd99f3db3ab303bc9e316e6-45x46.svg)
    
    ### Privacy protections
    
    Skan AI is designed to prioritize operational patterns over individual monitoring, with controls that support anonymity, data minimization and restricted access.
    

## One platform. More to Skan.

-   [
    
    ![Avinash Misra picture](https://cdn.sanity.io/images/3xg3qj5k/production/f4d5d1a8c70a4a56a98d7de07a71b16760e789be-2048x1360.jpg?q=80&fit=max&auto=format)
    
    Blog postAug 12, 2026
    
    5 mins
    
    ### The Context Enterprise AI Is Missing: How Work Actually Gets Done
    
    
    
    ](/blogs/the-context-enterprise-ai-is-missing-how-work-actually-gets-done)
    
-   [
    
    ![Why Process Intelligence Is the First Step to Fixing Payer Revenue Cycle](https://cdn.sanity.io/images/3xg3qj5k/production/8df7477479f5dcde54356848516fe345ce43f87b-736x491.jpg?q=80&fit=max&auto=format)
    
    Blog postJul 10, 2026
    
    9 mins
    
    ### Why Process Intelligence Is the First Step to Fixing Payer Revenue Cycle
    
    
    
    ](/blogs/why-process-intelligence-is-the-first-step-to-fixing-payer-revenue-cycle)
    

Frequently asked questions

## Frequently asked questions

What data should workplace observation platforms capture?

Workplace observation platforms should capture operational patterns such as application usage, workflow sequences, process steps and time allocation. They should avoid capturing personal messages, passwords, keystrokes or business content.

How can operational intelligence platforms protect sensitive data?

They can protect sensitive data through encryption, access controls, masking, redaction, retention policies and customer-controlled observation settings.

How can companies avoid employee surveillance when observing work?

Companies should focus on workflow patterns, process performance and team-level operational insights rather than individual monitoring. The goal should be improving how work gets done, not evaluating individual employees.

What security standards matter for enterprise operational intelligence?

Common standards include SOC 2 Type II, ISO 27001, GDPR, CCPA and industry-specific requirements for regulated sectors such as financial services and healthcare.