> ## Documentation Index
> Fetch the complete documentation index at: https://docs.surfaice.pro/llms.txt
> Use this file to discover all available pages before exploring further.

# Security overview

> Public security posture for Surfaice: permissions, isolation, subprocessors, and compliance status.

<Warning>
  **Canonical source:** Compliance claims (SOC 2 status, subprocessors, training, contractual commitments) live on [surfaice.pro/security](https://www.surfaice.pro/security). This page summarizes product behavior for doc readers and must not outclaim that page.
</Warning>

This page summarizes security topics for product users and reviewers. The live, questionnaire-oriented write-up lives on the marketing site and is the preferred link for IT reviews.

**Hugo** is Surfaice’s in-app AI agent. When other pages say “agent requests” or “agent runs,” they mean work Hugo performed in a customer workspace.

<Card title="Full security page" icon="shield-halved" href="https://www.surfaice.pro/security">
  Enterprise security summary, subprocessors, compliance status, and NDA package request.
</Card>

## Highlights

* **Permissions inherited** from source systems; Surfaice does not expand entitlements — see [Permissions](/concepts/permissions)
* **Per-user mailbox** connections — no tenant-wide mailbox read
* **Isolated customer environments** on Google Cloud (US regions)
* **No customer data used to train models** (contractual)
* **[Audit trail](/concepts/audit-trail)** of agent requests — who asked, what tools ran, what was produced
* **SOC 2 Type II** — in progress via Vanta (observation period ahead of independent audit), expected Q3/Q4 2026; see [surfaice.pro/security](https://www.surfaice.pro/security)

## In-product trust docs

These pages complement the marketing security summary:

* [Trust FAQ](/concepts/trust-faq) — procurement and compliance questions
* [Audit trail](/concepts/audit-trail) — what is logged and who can access it
* [Agent limitations](/concepts/hugo-limitations) — honest limits on memory, corpus coverage, and accuracy
* [Data handling](/concepts/data-handling) — persistence model and subprocessors

## Documents under NDA

Request the Security Guide, Application Architecture Diagram, and AI Governance Policy via [security@surfaice.pro](mailto:security@surfaice.pro).

## Vulnerability disclosure

Report security issues under our [vulnerability disclosure policy](https://www.surfaice.pro/vulnerability-disclosure-policy).

## Related docs

* [Trust FAQ](/concepts/trust-faq)
* [Audit trail](/concepts/audit-trail)
* [Permissions](/concepts/permissions)
* [Data handling](/concepts/data-handling)
* [Agent limitations](/concepts/hugo-limitations)
* [FAQ](/faq)