Achiral uses industry-grade security measures, including encryption, tenant isolation, access controls, and audit logging, to protect customer data and memories. We maintain readiness work for SOC 2 Type II, ISO 27001, GDPR-aligned privacy practices, and HIPAA-aligned safeguards.
Current status
The table below distinguishes operational readiness, contractual support, and formal certification work across the programs customers most often ask about during security review.
Readiness controls in place
Achiral supports GDPR-oriented data protection workflows through privacy documentation, customer-controlled processing instructions, data rights request paths, and Data Processing Addenda for qualifying customers.
HIPAA-aligned safeguards
Achiral supports eligible healthcare customers with HIPAA-aligned safeguards, including tenant isolation, access controls, audit logging, encryption, and Business Associate Agreements where appropriate.
Readiness and audit preparation in progress
Achiral is preparing for a SOC 2 Type II examination with control monitoring, evidence collection, policy mapping, and audit preparation.
Readiness and certification path in progress
Achiral is preparing for ISO 27001 certification, including policy coverage, risk management, asset controls, access governance, and evidence management.
Controls
Achiral maintains readiness work across access control, encryption, tenant isolation, audit logging, data processing, vendor review, incident response, and certification evidence. Audit scope, reports, and certificates will be reflected here when available.
Documents
These public documents are used for security review, privacy review, procurement, and regulated-customer diligence. Additional contractual artifacts, including DPAs and BAAs, are available for qualifying customers.
FAQ
Achiral maintains privacy and data processing documentation, supports customer processing instructions, and offers Data Processing Addenda for qualifying customers. Public wording should be understood as GDPR readiness and support, not a government-issued certification.
Achiral supports eligible healthcare customers with HIPAA-aligned safeguards, including tenant isolation, access controls, audit logging, encryption, and Business Associate Agreements where appropriate.
SOC 2 Type II work is in progress. Achiral is preparing control evidence, policy coverage, monitoring practices, and audit materials for the examination.
ISO 27001 readiness and certification work is in progress. Achiral will update this page when certification scope, status, and evidence availability change.
Yes. Customers can request privacy, security, DPA, BAA, SLA, and compliance documentation through Achiral sales, support, legal, or privacy contacts.
Contact
For security questionnaires, DPAs, BAAs, audit-readiness updates, or compliance documentation, contact the Achiral team. Responses distinguish current controls, in-progress work, and documents available under an applicable customer agreement.
