Book a demo (opens Microsoft Bookings in a new tab)
Company · Certifications

Compliance, on the record.

The same discipline we sell. Here is where each program stands, and what we will sign before you send us a document.

Program status
SOC 2 Type IINot certifiedControls are designed and mapped against the SOC 2 Type II criteria. Barkrow holds no SOC 2 report: no audit has been performed and no observation window has started.
Independent penetration testNo reportNo third-party penetration-test report or executive summary is available. We will share one under NDA once it exists.
HIPAANot offeredBarkrow is not designed for PHI and does not offer a standard BAA.
Data Processing AddendumAvailableSigned on request for every customer agreement.
PII checksImplemented with limitsDetected identifiers are replaced before AI processing. Some names and other identifiers may remain.
EncryptionDeployed controlsHTTPS for public traffic; the database and document storage are encrypted at rest with provider-managed keys.
HostingUS databaseDatabase in us-west-2 (Oregon); documents and compute in western North America. Text embeddings and short cached excerpts run on a global edge network, as the privacy policy discloses.
NDAOn requestMutual NDA available before security review.
Posture

Privacy checks before AI processing

Barkrow reduces identifying information sent for AI processing. Automated detection does not cover every name or identifier.

Append-only by design

Every check is written down, and every extracted value is source-linked to its page. Nothing is silently overwritten.

Identity & access

Email and password sign-in with two-step verification, Google sign-in, and single sign-on on Pro and Enterprise. Roles and invite controls remain behind Barkrow seat and entitlement checks.

What’s enforced in the product today: tokens for detected personal identifiers before every model call (detection has limits), row-level tenant isolation in the database, and a source page on every extracted value. That’s the current state, not a certification claim.

Full detail lives on the Security, Data Processing and AI Acceptable Use pages. For a security review or signed DPA, get in touch.

Startup programs

Barkrow Systems is enrolled in the following startup programs. Enrollment reflects vendor relationships, not an endorsement of the product by these companies.

Stripe StartupsPayments & billing
Microsoft for StartupsCloud & AI

Ask for the current evidence.

We will send exactly what exists today, with the windows and dates on it, and nothing that does not.