Security & Trust
Deployed where your security team needs it.
Moveo One models customers from first-party behavioral data, so it is built to pass an enterprise security review: region-bound hosting, three deployment models, SSO and MFA, encryption and a documented security program. Formal certifications are in progress, and this page states exactly where each one stands.
Where we are today
Practices already in production for every customer.
Encryption everywhere
TLS 1.2+ in transit. AES-256 at rest. Secrets and keys managed with strict rotation policies.
SSO, MFA and access control
SSO and MFA for customer workspaces. Role-based access control across internal systems, with MFA enforced for every team member with production access.
Data residency
EU-resident or US-resident infrastructure. Your data is stored and processed in the region you choose.
Flexible deployment
Managed multi-tenant, dedicated single-tenant environment, or fully on-premise inside your own cloud. Your perimeter, your rules.
Internal security policy
Documented security policy covering access, incident response, vendor review, backups, and employee onboarding/offboarding.
Your data stays yours
First-party data is used only to train and serve your models. Never sold or shared. GDPR-aligned, DPA available, export and deletion supported.
Compliance roadmap
Honest status. We will not claim a certification we don't hold.
SOC 2 Type II
Controls and policies aligned. Audit targeted later this year.
ISO 27001
ISMS scoping underway. Certification targeted in 2027.
GDPR
Practices in place; formal DPIA documentation in progress for enterprise customers.
HIPAA
BAA and HIPAA-aligned configuration available for healthcare deployments under evaluation.
Hosting & deployment options
Managed cloud
Fastest setup. EU or US region of your choice. Operated and monitored by us.
Dedicated environment
Single-tenant infrastructure isolated from other customers. Your VPC equivalent, our operations.
On-premise
Deploy inside your own cloud account or data center. Data never leaves your perimeter.
Need details for your security review?
We're happy to share our current security questionnaire (CAIQ-Lite / SIG-Lite), DPA, architecture overview, and roadmap timeline. Enterprise customers can also request a call with our team to walk through controls.
Last reviewed: 27 September 2026. This page reflects our current security posture and compliance status. We update it as certifications progress.