Trust Center

Trust Center Updates

Announcements about NotAI's security and compliance posture are published here: certification progress, new and updated documents, subprocessor changes, policy changes, and security notices. This page is the record of what changed and when.

All Updates

  1. Compliance

    Accessibility Conformance Report and HECVAT Lite Now Public Downloads

    The Accessibility Conformance Report (VPAT) and the HECVAT Lite questionnaire response are now public downloads in the resource library. Both are regenerated continuously from live evidence by an automated compliance pipeline. HECVAT Full remains available to enterprise customers in the dashboard's Documents section.

  2. Subprocessors

    Subprocessor Table Corrected: Google LLC Added

    The subprocessor table on this site now lists Google LLC (business email communications: names, email addresses, and message content of business correspondence, processed in the United States under a data processing agreement with standard contractual clauses where applicable). Google LLC was already disclosed in the subprocessor list in Section 5 of the NotAI Privacy Policy, which Annex 3 of the DPA incorporates by reference. This entry corrects an omission from the table on this site; it is not the addition of a new subprocessor, so the thirty (30) day advance notice period committed in Section 5.4 of the DPA is not restarted.

  3. General

    NotAI Trust Center Launched

    The NotAI Trust Center is now live. It is self-hosted on our own infrastructure, sets zero cookies and loads zero third-party scripts, and ties access to restricted documents to our existing enterprise authentication rather than a third-party approval service.

  4. Compliance

    SOC 2 Type II Report Available to Customers

    NotAI maintains a SOC 2 Type II attestation, refreshed annually. The current report is available under NDA to authenticated enterprise customers through the resource library.

Subscribe

Follow these announcements in any feed reader. NotAI customers also receive these notices in the dashboard, so there is no email subscription list to join.

Subscribe via RSS

Subprocessor additions and replacements are announced at least 30 days in advance in this feed. The current list is always available on the subprocessors page.