Defense in Depth
Deploy a multi-layered security approach with technical, physical, and administrative safeguards, including a least-privilege and separation-of-duties model, transport layer encryption, and extensive logging and monitoring of system and application events.
Learn more about security services available on the C3 AI Platform 
Customer-Managed Security
Stay in control with full transparency over data and models using self-service features.
IT teams can delegate authentication and authorize third-party applications to access using OAuth 2.0 or Open ID Connect. SAML-based SSO and multi-factor authentication is designed to meet advanced authentication requirements.
Access Controls
Manage user access with a comprehensive, role- and policy-based control framework. Use your existing identity management solutions and corporate directories to segregate duties and limit user access to resources or create custom user controls for any specific application and infrastructure level.
Certifications
The C3 AI Platform is built to comply with rigorous legal and regulatory requirements and meets the following certifications:
- SOC1/SSAE 16/ISAE 3402 (formerly SAS 70 Type II)
- SOC 2
- SOC3
- NIST
- FISMA
- FedRAMP
- FIPS 140-2
- DIACAP
- ITAR
- HIPAA
- PCI DSS Level 1
Private Cloud Deployments
Mitigate risk and limit attack surface with private cloud deployments in public or on-premise clouds. Deploy within isolated networks (VNETs / VPCs) to avoid breaches from public IPs or IP access lists.
Take the Next Steps
Learn how our industry-leading Enterprise AI software products can help your organization.
Contact us at IR@C3.ai to learn more about investing at C3 AI.
For all other questions, please contact us here.