# Security and compliance

[RightNow AI](https://www.rightnowai.co/) / [Open models](https://www.rightnowai.co/docs/open-models) / [Security and compliance](https://www.rightnowai.co/docs/open-models/security)

Updated 2026-11-14

The pages a security review asks for, in one place.

## Documents

- **Security**: [Security](https://www.rightnowai.co/open-models/security)
- **Data Processing Agreement**: [Data Processing Agreement](https://www.rightnowai.co/open-models/dpa)
- **Trust center**: [SOC 2 Type 2](https://trust.rightnowai.co/)
- **Security review or procurement**: Choose this topic on the [contact form](https://www.rightnowai.co/contact?topic=security-review#contact-form).

## In these docs

- **Encryption in transit**: TLS 1.2 or above. See [Account and access](https://www.rightnowai.co/docs/open-models/account#security).
- **API keys**: Hashed at rest. See [Authentication](https://www.rightnowai.co/docs/open-models/authentication#security-posture).
- **Data retention**: Zero data retention by default. See [Data retention](https://www.rightnowai.co/docs/open-models/data-retention).
- **Audit log**: See [Audit log](https://www.rightnowai.co/docs/open-models/audit-log).

## Next

[Audit log](https://www.rightnowai.co/docs/open-models/audit-log)