Platform
Enterprise-grade security with standards-based identity federation, tenant isolation, encryption at rest, and complete audit trails.
Complete data separation between organisations -- no cross-tenant data leakage, ever.
AES-256 encryption at rest and TLS 1.3 in transit for all documents and extracted intelligence.
Every access, query, and modification logged with timestamp, user, and action detail.
Granular permissions from platform admin to read-only viewer -- control who sees what.
Built for regulated industries with GDPR, SOC 2, and sector-specific compliance in mind.
SAML 2.0 and OIDC federation with Microsoft Entra ID, Google Workspace, Okta, and any standards-compliant identity provider. Domain-based routing and enforced SSO per organisation.
SCIM 2.0 automatic user provisioning and deprovisioning. Your identity provider controls access -- CirclAI reflects it in real time.
TOTP-based 2FA with recovery codes. Standards-compliant (RFC 6238), works with any authenticator app.