Skip to content
Security

At Encircle, trust is foundational

We protect your data, respect your privacy,
and operate with full transparency.

Strong security practices, privacy safeguards, reliable
infrastructure, and responsible AI keep your information protected.

AICPA SOC for Service Organizations badge
SOC 2 Type 2 compliant
Security you can count on

Designed for real claims work

Claims and restoration teams trust us with sensitive customer, property, and job data. Security is built into how we design, deploy, and run the platform.

Security and assurance

  • SOC 2 Type 2 compliant (independently audited)
  • Annual third-party penetration testing
  • Documented incident response plan
  • Customer notification within four hours of confirmed incidents
  • Continuous monitoring and alerting
Privacy and control by default

Access only for the right people

Your data stays within the teams you authorize. Permissions are enforced at multiple layers, including our data model, and internal access is kept to the minimum needed.

Data safeguards

  • Encryption in transit, at rest, and in backups
  • Centralized security logging, retained for audit
  • Regular patching and maintenance
  • Defense-in-depth privacy controls at every layer
Reliability that supports your deadlines

Built for reliability and recovery

Claims work can’t wait. Encircle runs on secure Canadian cloud infrastructure designed to keep your teams working, even when the unexpected happens.

Infrastructure and continuity

  • Hosted in Canada on Microsoft Azure
  • Production in Canada Central, disaster recovery in Canada East
  • Ongoing infrastructure monitoring
  • Documented disaster recovery and business continuity plans
AI governance that protects your data

Built for secure, responsible AI

Our AI speeds up documentation inside a private, controlled environment held to the same security standards as the core platform.

AI deployment and data protection

  • Private, isolated AI environment for Encircle customers
  • No public AI tools, shared datasets, or consumer AI platforms
  • Your project data never trains foundational models
  • Controlled prompts and processing rules
  • Data used only for your outputs and never leaves Encircle

Have questions?

Yes. Encircle is SOC 2 Type 2 compliant, meaning our security controls are independently audited and validated over time.

Encircle is hosted on Microsoft Azure in Canada. Production systems run in Canada Central with disaster recovery in Canada East.

Yes. Encircle encrypts data in transit using TLS/HTTPS, and backups are encrypted.

Yes. Encircle completes annual third-party penetration testing and maintains SOC 2 Type 2 compliance through independent audits.

No. Encircle does not train AI models on customer data. Your information remains private and isolated within the Encircle platform.