Security and compliance

Desearch has a SOC 2 Type II report from an independent audit and handles personal data under the GDPR. A Data Processing Agreement (DPA) and zero data retention are available, and Desearch's controls are aligned with the HIPAA Security Rule. For a summary to share with your security team, see Security at Desearch.

Documents

Zero data retention

Zero data retention is available. With it enabled, Desearch doesn't store your queries or results and doesn't use them for training. Without it, the privacy policy lists API calls and queries among the usage data Desearch may collect. Contact our team to enable zero data retention for your workload.

HIPAA

Desearch's controls are aligned with the HIPAA Security Rule. If your workload involves protected health information (PHI), talk to our team before you send it so you can review your requirements together.

API keys

Every request authenticates with your API key over HTTPS:

Keep the key on your server or in a secret manager, and never ship it in a browser bundle. Desearch Console shows request costs and usage by API key and service. See Pricing and billing.

Report a vulnerability

Email support@desearch.ai and start the subject line with [Security]. Include the affected system, steps to reproduce, and the impact you observed.

While testing, use only your own account and data, don't disrupt the service, and give us time to fix the issue before you disclose it publicly.