Bagel AI Security
Compliance and Data Protection for Your Product Brain
Bagel AI reads your sales calls and support tickets, so your security team should know exactly how that data is handled. This page covers it, and the SOC 2 Type II report and DPA are waiting in our Trust Center.
Your customer conversations are some of the most sensitive data your company holds. We built Bagel AI so your security team can see where that data goes and who can touch it.
Enterprise-grade security.
Your customer data stays yours.
Audited compliance
SOC 2 Type II certified, with GDPR and CCPA covered and data encrypted at rest and in transit.
A model of your own
Your dedicated model trains on your data alone. It never trains another customer’s model.
Minimal PII by design
PII is reduced in the architecture before customer data ever reaches a model, and the context stays intact.
Access control
Single sign-on and roles by team and product line, with an audit trail of who saw what.
Trusted by security teams.
Gong, 8×8, Tipalti and Yotpo put Bagel AI through their own security reviews before their product teams went live.
How does Bagel AI protect customer data?
Bagel AI is SOC 2 Type II certified and covers GDPR and CCPA. Each customer gets a dedicated model trained only on their own data, so your data never trains another customer’s model. PII is reduced in the architecture before anything reaches a model, data is encrypted at rest and in transit, and access runs through SSO with role-based permissions and a full audit trail.
Compliance You Can Check
Our controls are audited independently, and the reports sit in the Trust Center so your team can review them before the first call.
SOC 2 Type II
Independently audited controls. Request the full report through the Trust Center.
GDPR and CCPA
A customer DPA is ready to review, and every subprocessor is listed with where it runs.
Policies on File
Our backup, encryption key management, network and HR policies are published for your review.
Control Who Sees What
Access follows your teams and product lines, and every change leaves a record.
SSO and Role-Based Access
Single sign-on through your identity provider, with permissions by team and product line.
Full Audit Trail
Access and decision changes are logged, so you can answer who saw what, and when.
Decision Lineage
Every decision traces back to the calls and tickets behind it, and forward to the outcome it produced.
AI Transparency
You can see how your data is handled and used across Bagel AI.
SSO is included from the Pro plan up. Advanced permissioning and the audit trail come with Enterprise.
How We Run Security Day to Day
These are the controls behind the product, from how we ship code to how we recover from an outage.
Secure Development
Code ships through a secure development lifecycle and change management, and the product goes through penetration testing and vulnerability scanning.
Tested Recovery
Business continuity and disaster recovery plans are tested, along with incident response and backup restores.
Locked-Down Internal Access
Our team signs in with MFA and goes through user access reviews. Company laptops are encrypted and run endpoint detection and response.
Risk and Vendor Management
Risk assessments and vendor risk reviews are part of the program, and everyone on the team goes through security awareness training.
Every one of these controls is documented in the Trust Center.
FAQ – You ask, we answer
Yes. Bagel AI is SOC 2 Type II certified. You can request the report through the Bagel AI Trust Center at trust.bagel.ai.
Yes. Bagel AI covers GDPR and CCPA. A customer DPA is available in the Trust Center, together with the full list of subprocessors and where each one runs.
Each customer gets a dedicated model trained on their own data, product taxonomy and customer language. Your data never trains another customer’s model, and PII is reduced by architecture before it reaches a model.
Bagel AI runs on AWS and Google Cloud in the US. Every subprocessor, including the AI model provider, is listed in the Trust Center with its location.
Yes. Data is encrypted at rest and in transit, and encryption keys are handled under a documented key management policy.
Yes. SSO is included from the Pro plan up. The Enterprise plan adds advanced permissioning and a full audit trail, so access can follow your teams and product lines.
Go to trust.bagel.ai and request access. The SOC 2 Type II report, the DPA and the security policies are all there, and our team can join your security review if you want a walkthrough.
Ready to see Bagel AI in action?
Connect the dots between feedback, roadmaps, and business wins. Let Bagel AI show you how feedback drives impact.
