Databricks
BigQuery
Redshift
PostgreSQL
Azure Synapse
ClickHouse
DuckDB
ekai raises $1.7MBacked by Misneach and C10 Labs. Yahoo Finance ↗Home / Security
Security overview
At ekai, we are committed to protecting customer data and maintaining a secure, reliable platform. Our security program is designed around industry best practices and continuously evolves to address emerging threats.
Completed SOC 2® Type II examinationZero exceptions across every control tested, audited by Johanson Group, an independent CPA firm.
Request the reportSelf-hosted or Snowflake Native App
Your data warehousereads
ekaidbtModels in its own ekai schema
Your data warehousereadsekaidbtModels in its own ekai schema✕ Raw rowsRaw rows never leave your data warehouse
0Exceptions across every control tested
Source tablesekai never writes to them
9Control areas, reviewed regularly
Nine control areas
Infrastructure securityHosted on secure cloud infrastructure (AWS, Azure, or GCP)4 controls
- Hosted on secure cloud infrastructure (AWS, Azure, or GCP)
- Virtual Private Cloud (VPC) for network isolation
- Firewalls and security groups restrict unauthorized access
- Continuous monitoring of infrastructure and network activity
Data protection and encryptionAll data encrypted in transit using TLS 1.2+3 controls
- All data encrypted in transit using TLS 1.2+
- Data encrypted at rest using AES-256
- Secure key management practices implemented
Access controlRole-Based Access Control (RBAC) enforced across systems4 controls
- Role-Based Access Control (RBAC) enforced across systems
- Principle of least privilege applied to all access
- MFA required for privileged access
- Regular access reviews conducted
Application securitySecure Software Development Lifecycle (SDLC) practices4 controls
- Secure Software Development Lifecycle (SDLC) practices
- Code reviews required for all production changes
- Automated testing and CI/CD pipelines
- Dependency and vulnerability scanning
Monitoring and incident responseCentralized logging and monitoring4 controls
- Centralized logging and monitoring
- Real-time alerting on suspicious activity
- Incident response plan with defined escalation procedures
- Post-incident reviews and root cause analysis
Data privacy and confidentialityCustomer data is logically isolated3 controls
- Customer data is logically isolated
- Access to customer data is restricted and audited
- Employees and contractors sign confidentiality agreements
Business continuity and backupsRegular automated backups3 controls
- Regular automated backups
- Disaster recovery procedures in place
- High availability architecture for production systems
Vendor and third-party managementUse of trusted cloud and infrastructure providers3 controls
- Use of trusted cloud and infrastructure providers
- Vendors evaluated for security and compliance
- Shared responsibility model clearly defined
Compliance and assuranceSOC 2 Type II examination completed3 controls
- SOC 2 Type II examination completed
- Security policies reviewed and updated regularly
- Internal risk assessments conducted