> For the complete documentation index, see [llms.txt](https://trust.impact.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://trust.impact.com/security.md).

# Security

Our AI is built on the same enterprise-grade security foundation that protects the entire impact.com platform. We believe innovation and security move together, never one at the expense of the other.

{% hint style="success" %}
**Proactive AI governance:** Our legal and compliance teams actively track emerging global AI regulation, so our practices stay ahead of requirements rather than racing to catch up.
{% endhint %}

## Key security measures

In-platform AI and MCP are subject to our rigorous, multi-layered security program. Our platform, including its AI features, is regularly audited by independent third parties. For an in-depth view of our certifications, see [Certifications](/impact.com-data-security-and-privacy-trust-center/certifications.md).

<table data-view="cards"><thead><tr><th></th><th></th></tr></thead><tbody><tr><td><strong>🔒 Encryption</strong></td><td>Your data is protected in transit (TLS 1.2+) and at rest (AES-256).</td></tr><tr><td><strong>🔑 Access controls</strong></td><td>Our AI is not a backdoor. It fully respects the Role-Based Access Controls (RBAC) in your account: if a user can't see certain data, neither can the AI acting for them.</td></tr><tr><td><strong>🛡️ Content filtering &#x26; misuse prevention</strong></td><td>For in-platform AI features, we apply advanced safety filtering to Gen AI inputs and outputs (including Google's Model Armor) to guard against harmful, misleading, or abusive content.</td></tr><tr><td><strong>📡 Monitoring &#x26; alerting</strong></td><td>In-platform AI features are covered by continuous monitoring, with automated abuse protection and alerting feeding our security and reliability processes.</td></tr><tr><td><strong>🧪 Rigorous testing</strong></td><td>Before release, every in-platform AI feature goes through internal code review, integration testing, independent penetration testing by white-hat experts, and adversarial testing to identify and mitigate misuse.</td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://trust.impact.com/security.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.

🔒 Encryption	Your data is protected in transit (TLS 1.2+) and at rest (AES-256).
🔑 Access controls	Our AI is not a backdoor. It fully respects the Role-Based Access Controls (RBAC) in your account: if a user can't see certain data, neither can the AI acting for them.
🛡️ Content filtering & misuse prevention	For in-platform AI features, we apply advanced safety filtering to Gen AI inputs and outputs (including Google's Model Armor) to guard against harmful, misleading, or abusive content.
📡 Monitoring & alerting	In-platform AI features are covered by continuous monitoring, with automated abuse protection and alerting feeding our security and reliability processes.
🧪 Rigorous testing	Before release, every in-platform AI feature goes through internal code review, integration testing, independent penetration testing by white-hat experts, and adversarial testing to identify and mitigate misuse.