From encryption to access controls, Grasp protects your data to enterprise-grade security standards, keeping it secure, private and under your control.
Go to trust center
Enterprise-grade security by default
What you find stays yours. Encrypted, access-controlled, fully compliant.
SOC2 Type I & II certified
Compliant with DORA requirements
GDPR data protection compliant
Certified to ISO 27001's information security standard
No. We do not train on your searches, lists or documents. Your data is used only to serve your account, and no target or buyer is ever told you looked. Visit our Trust Center for more on security, privacy and data handling.
Grasp’s platform runs on Google Cloud in the EU. Some of the services we rely on, such as AI model providers, sign-in, analytics, support and email, process data in the US or elsewhere, covered by Standard Contractual Clauses. Our Trust Center lists every subprocessor and where it operates, and we give at least 30 days’ notice before adding or replacing one.
Yes. Grasp is ISO/IEC 27001:2022 certified, and our controls are independently audited under SOC 2 Type II. You can view the ISO certificate and SOC 2 attestation letters in our Trust Center, and request the full SOC 2 report there.
Your data is encrypted at rest and in transit. Only people who need access to production systems have it, and access is removed as soon as someone leaves. Every change to the platform is reviewed and approved before release, and Grasp is penetration tested by independent experts.
We work with leading AI model providers, including OpenAI and Anthropic. The full list, with what each provider does and where it operates, is kept up to date in our Trust Center.
Yes. Grasp supports enterprise single sign-on.
We purge and remove customer data containing confidential information from the application environment, in accordance with best practices, when customers leave the service. For more information check our Trust Center.
We sign a Data Processing Agreement with every customer, collect only the data the service needs, and publish our subprocessors in our Trust Center.
Yes. Start with our Trust Center, where you can view our certificates and request reports. For questionnaires or anything else, email security@grasp-ai.com.