Security, Privacy & Platform Reliability

Data is encrypted in transit (TLS 1.2+) and at rest using industry-standard encryption managed by our cloud infrastructure providers.

Access to production systems is restricted to authorized Sabius personnel, protected by strong authentication and least-privilege permissions.

Application secrets and API keys are stored in managed secret stores — never in source code.

Customer workspaces are isolated. Row-level security policies enforce that users can only see data within their own workspace.

Roles and permissions are enforced server-side. Administrative actions are gated by role checks and, where appropriate, human approval.

Sabius collects only the information needed to deliver the service and any information customers choose to provide (leads, contacts, communications).

We do not sell personal information. Customers own their data and can request export or deletion.

SMS and email communications require opt-in consent. Consent is recorded and preferences are honored across every channel.

Sabius runs on managed cloud infrastructure with automated backups and redundant regions.

Every AI action is logged for auditability. High-risk actions require human review before they execute.

We monitor the platform continuously and communicate proactively with customers about material incidents.

Sabius follows established security and privacy best practices, including SOC 2-aligned operational controls and TCPA-aligned consent handling for SMS.

We are happy to share additional detail with customers under NDA. Contact us for a security questionnaire or DPA request.

To report a security concern, request a DPA, or ask a compliance question, email security@sabiushq.com.

We acknowledge security reports within one business day.