Security and compliance
Security your reviewers can check
RepLab has completed a SOC 2 Type I audit, is GDPR compliant, supports SSO and runs on AWS. Here's what each of those covers, and who to email for the documents.
SOC 2 Type I
GDPR compliant
Trusted by sales and service teams at
Certifications
What we hold today
SOC 2 Type I and GDPR. That's the full list today, and we won't pad it with frameworks we haven't been audited against.
SOC 2 Type I
Our SOC 2 Type I audit is complete, so your security team can check our controls against a standard they already know.
GDPR compliant
RepLab is GDPR compliant. If you need a data processing agreement (DPA), we'll send one on request.
Data protection
How we protect your data
Hosted on AWS
RepLab runs on Amazon Web Services.
Encrypted in transit
Traffic between your team and RepLab is encrypted with TLS.
SSO and MFA
Your team signs in with SSO. On our side, MFA is enforced for every staff login to RepLab's systems.
Your data stays yours
Customer conversations are never used to train external AI models. Export your data or delete it any time.
Access limited to the people who need it
A roleplay recording is visible to the rep who made it and their manager. That's it.
Documents
Get the paperwork for your review
Security documentation and a DPA are available on request. Email us and tell us what your review needs.
security@rep-lab.ai →Related: RepLab for enterprise, our privacy policy and terms and conditions.
Which SOC 2 audit has RepLab completed?
SOC 2 Type I. That's the audit we've completed, and we won't claim one we haven't been audited against. If your review needs the details, email security@rep-lab.ai.
Will you sign a DPA?
Yes. RepLab is GDPR compliant and we send a data processing agreement on request.
Are our conversations used to train AI models?
No. Customer conversations are never used to train external AI models.
Where is our data hosted?
RepLab runs on Amazon Web Services. For hosting details your review needs, email security@rep-lab.ai.
Who can see a rep's roleplay recordings?
The rep who made the recording and their manager. That's it.
Can we export or delete our data?
Yes, any time. Your data stays yours.
Do you support single sign-on?
Yes. Your team signs in with SSO, and MFA is enforced for every RepLab staff login.