Skip to content
Book a demo

Security

Security at Refinee, in plain language.

You’re trusting us with compliance data. Here is what Refinee does with it today, and what we’re still building. Every capability below is marked Live or Coming next.

Ask a security question

Our commitments

Three things we hold to.

  • No training on your data

    We never use customer data to train AI models.

  • Human approval required

    AI drafts. People decide. Nothing is sent before someone on your team approves it.

  • Clear about what’s live

    Every feature is marked Live or Coming next, so you know exactly what you’re buying today.

Accountable answers

Every answer has an owner.

Refinee is built so you can show how an answer was produced and who signed off on it.

  • Human approval on every answer

    Nothing leaves until a person on your team approves it.

    Live

  • Confidence score on every draft

    Each drafted answer shows how confident the AI was, low-confidence drafts are held for review automatically, and reviewers know where to look first.

    Live

  • Policy versioning & approval

    Every policy change is versioned, submitted and approved, and can be reverted, with the controls each policy covers mapped alongside it.

    Live

  • Decision lineage

    Where each answer came from, how fresh the evidence is, and who approved it.

    Live

  • One tamper-evident audit log

    Every evidence fetch, assistant question and outgoing answer is written to one hash-chained log that can be verified.

    Live

  • Governed AI access

    AI assistants can query your compliance data read-only, over MCP. Each token has its own tool allow-list and rate limit, and every call is audited.

    Live

Compliance program

Where we stand.

In progress

SOC 2 program in progress

We’re building our own SOC 2 program. Refinee does not hold a SOC 2 report today. Ask us and we’ll tell you exactly where things stand.

Ask about SOC 2

Your review

Reviewing Refinee as a vendor?

Security reviews

Send us your security review

We’ll answer it the way we’d want our customers’ answers to read: plainly, and only with what’s in place today.

Send a security review

Your data

Questions about your data

How we collect, use and protect information is set out in our Privacy Policy. Data requests go to the founder directly.

Read the Privacy Policy

Questions about security?

Talk to the founder directly. You’ll get a straight answer, including when the answer is “not yet.”

Contact us