Is VixPro AI suitable for teams with SOC 2 or compliance requirements?

VixPro AI's architecture includes several controls that align with SOC 2 and similar frameworks:

• Audit trail — every tool execution logged to an immutable audit table with secret auto-redaction, output integrity hashing, and attribution (AI agent, scheduled, admin test, NLP query)
• Access control: all approvals for high-risk operations happen in the dashboard behind authenticated sign-in (passkey or email OTP). Notification channels are informational only
• Data isolation: per-organization execution environments, org-scoped database access enforced on every query, no cross-customer credential sharing
• Secrets management: customer credentials stored in Azure Key Vault, isolated per organization, resolved only at execution time
• Encrypted communications — all agent traffic routes through Cloudflare Tunnel over TLS. No plaintext channels
• Key management — RSA-4096 signing keys in isolated environments with separate trust boundaries. Signed key rotation without binary rebuilds
• Change management — automated change records with pre/post health checks for all scheduled maintenance