Security and complianceEarly access
Security you can show your auditor.
How we protect company data, what is in place today, and where Tavix can run.
How your data is protected
Two-key access
Tuti uses a file only if the person can open it and your admin shared it with their space.
A separate sandbox
Each person's Tuti runs in its own locked container, apart from everyone else's.
Approvals for risky steps
Spending, outside email and file sharing wait for a person.
Leak protection
Passwords, keys and sensitive data are stopped before they leave.
A full audit log
Every action, search and approval is recorded, and you can export it.
No training on your data
The AI models we use do not keep your data or learn from it.
Compliance status
Included means it works today. Coming means it is planned.
- Included
Single sign-on
Everyone signs in with your company login. Accounts are added and removed for you.
- Included
Audit log
Every action, search and approval is recorded. Send it to your own security tools.
- Included
Permission-aware answers
Answers only come from files the person can already open. We test for leaks.
- Included
Signed approvals
Money approvals are confirmed on the approver's own device.
- Included
No training on your data
It is in the contract. The AI providers we use do not keep your data.
- Coming
Your data, your location
Keep data in the US, EU or Canada, with your own encryption keys. Set up with our team.
- Enterprise
Health data agreement
A HIPAA business associate agreement is available on Enterprise.
- Coming
SOC 2 audit report
An independent security audit. Type I first, then Type II.
Where it runs
Choose how Tavix is hosted.
- Available
Tavix cloud
We run everything for you.
- Enterprise
Your own cloud
A dedicated environment in your cloud account, with your keys.
- Enterprise
Self-hosted
Run Tavix on your own servers. Your data stays inside your network.
Try it with your team.
Start a pilot, or talk to sales.