Sign inJoin now
Company · Certifications

Compliance, on the record.

The same discipline we sell. Here is where each program stands, and what we will sign before you send us a document.

IProgram status
SOC 2 Type IINot certifiedControls are designed and mapped against the SOC 2 Type II criteria. Barkrow holds no SOC 2 report: no audit has been performed and no observation window has started.
Independent penetration testNo reportNo third-party penetration-test report or executive summary is available. We will share one under NDA once it exists.
HIPAANot offeredBarkrow is not designed for PHI and does not offer a standard BAA.
Data Processing AddendumAvailableSigned on request for every customer agreement.
PII checksImplemented with limitsDetected identifiers are replaced before AI processing. Some names and other identifiers may remain.
EncryptionDeployed controlsHTTPS for public traffic; encrypted Aurora and private S3 storage validated by release evidence.
HostingAWS us-west-2Private database, cache, and object-storage boundaries.
NDAOn requestMutual NDA available before security review.
IIPosture

Privacy checks before AI processing

Barkrow reduces identifying information sent for AI processing. Automated detection does not cover every name or identifier.

Append-only by design

Every check is written down and source-linked to the exact clause and page. Nothing is silently overwritten.

Identity & access

Hosted password, recovery, passkey, MFA, social and SSO capabilities. Roles and invite controls remain behind Barkrow seat and entitlement checks.

What’s enforced in the product today: PII tokenization on every model call, strict per-tenant isolation, and page-cited outputs on every extracted value. That’s the current state, not a certification claim.

Full detail lives on the Security, Data Processing and AI Acceptable Use pages. For a security review or signed DPA, get in touch.

IIIStartup programs

Barkrow Systems is enrolled in the following startup programs. Enrollment reflects vendor relationships, not an endorsement of the product by these companies.

AWS ActivateCloud infrastructure
Stripe StartupsPayments & billing
Microsoft for StartupsCloud & AI

Ask for the current evidence.

We will send exactly what exists today, with the windows and dates on it, and nothing that does not.