Security Posture & Compliance
Military-grade defense-in-depth architecture.
Zero-Trust Architecture
Nom AI operates on a strict Zero-Trust model. Every microservice within our Amazon EKS cluster must cryptographically authenticate itself using mutual TLS (mTLS) managed by AWS App Mesh. Network boundaries are secured by Security Groups and AWS Network Firewall.
Encryption Standards
- In-Transit: All data is encrypted using TLS 1.3 (FIPS 140-2 validated endpoints).
- At-Rest: All EBS volumes, S3 buckets, and RDS instances are encrypted using AES-256 via AWS Key Management Service (KMS).
- Customer Managed Keys (CMK): Enterprise tiers support Bring Your Own Key (BYOK) for absolute cryptographic control.
Threat Detection & Auditing
We deploy Amazon GuardDuty for intelligent threat detection across our entire AWS footprint. AWS CloudTrail logs all API activity and IAM modifications, forwarding immutable logs to a designated SecOps account.
Compliance Frameworks
- SOC 2 Type II: Annual audits performed by independent third parties.
- ISO 27001: Certified Information Security Management System (ISMS).
- NCA (Saudi Arabia): Fully compliant with National Cybersecurity Authority controls.
- PDPL: Strict adherence to the Personal Data Protection Law of Saudi Arabia.