LazarusAI Trust Center
Sensiba LLPDocuments
Self-Assessments
Self-Assessments
We are working on our security compliance. We can provide completed questionnaires upon request.
Security Grades
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
Lazarus General Security
A Message from the CISO
At Lazarus AI, our commitment to transparency is as foundational as the technology we build. As we expand our footprint within the European Union, we are proud to share our latest Data Security Statement for EU Deployment.
This document outlines the rigorous technical and organizational safeguards we employ to protect your data. Formally approved on February 9, 2026, by our CTO and myself, this statement serves as a roadmap for how we maintain integrity across our EU-based infrastructure.
Key Highlights of the EU Security Framework
Regional Infrastructure: Our EU microservice infrastructure and databases are hosted via Google Cloud Platform (GCP).
Encryption Standards: All data is encrypted at rest using AES-256 and in transit via TLS 1.2.
Certified Security: All utilized databases and endpoints are managed by Google and maintain SOC-1 and SOC-2 certification.
Controlled Access: Direct database access is strictly limited to authorized software engineers and administrators who have signed formal NDAs.
Third-Party Rigor: We utilize industry leaders—including GCP, Microsoft Azure, OpenAI, and DeepL—to provide high-performance models and optional translation services.
Proactive Data Protection & HIPAA Mode
We understand that different organizations have unique compliance needs. To provide maximum flexibility, we offer an "HIPAA Mode". When enabled, this allows users to forgo the storage of response data on our servers entirely, ensuring that your organization maintains complete control over sensitive outputs.
Our Breach Response Commitment
While we prioritize prevention, we maintain a structured 7-step response plan for any suspected data breach:
Investigation: Immediate verification of the suspected breach.
Dual-Team Deployment: Simultaneous focus on developing a fix and identifying the root cause.
Client Notification: Impacted clients are notified immediately regarding the extent of the event.
Containment: Affected database credentials are reset or blocked.
Remediation: Implementation of software fixes to remove any identified bugs or malfunctions.
Safety Update: Notifying clients of new safety measures once the fix is verified.
Prevention: Working with customers to enforce best practices and prevent future occurrences.
Access the Full Statement
The complete Lazarus APIs Security Statement (EU Deployment) is now available for review in our documentation library. We encourage all EU-based partners to review these protocols to see how we integrate into your existing security stack.
Jon Bethea
Chief Information Security Officer
Lazarus AI