Trust Center

Welcome to Ariso's Trust Center. Ariso Intelligence, Inc. ("Ariso") specializes in building Ari, an AI management system designed for self-managing teams, aiming to streamline work management and enhance team alignment. Our platform offers comprehensive solutions for strategy, project management, people management, task tracking, knowledge management, and relationship context. Ariso also provides Oats, a free and open-source meeting-notes tool, and Ivan, an expert Claude Code operator.

This Trust Center serves as a central resource to provide a clear and accessible overview of Ariso's security and trust practices. Here, you will find detailed information about how we protect your data and maintain a secure environment.

At Ariso, security is built into the core of our products and operations. We employ a security-first approach, which includes per-user encryption where every message is encrypted with a key unique to that user, a zero-trust architecture, and a firm commitment that customer data is never used to train our models.

Our commitment to security and trust is demonstrated through various practices and certifications:

• Certifications and Assessments: Ariso holds a SOC 2 Type I report, which provides an independent service auditor's report on the design of controls relevant to Security, Confidentiality, and Privacy trust service criteria. We have also signed the AI Trustworthy Pledge and completed a Google CASA assessment.
• Data Protection: We prioritize the confidentiality, integrity, and availability of your information. User requests to Ariso's systems are encrypted using Transport Layer Security (TLS) with certificates from established third-party authorities. Data at rest is encrypted using the Advanced Encryption Standard (AES) in 256-bit mode. We also have an Encryption Policy that defines organizational requirements for cryptographic controls and key management.
• Operational Practices: Ariso maintains a robust set of operational controls to ensure the security and reliability of our services. This includes secure coding practices, explicit error checking in in-house developed software, and regular security analysis to verify adherence to these practices. We also conduct ongoing monitoring of security advisories and periodic independent security reviews to identify vulnerabilities. Critical vendors and service providers are monitored annually for compliance with industry frameworks and Ariso's requirements. In the event of an incident, we have established procedures for immediate action, post-mortem analysis, and continuous improvement of our security program.
• Employee Conduct and Training: Ariso maintains a documented code of conduct that eligible personnel are required to acknowledge during onboarding and annually. We also have an organization-wide Information Security Policy, supported by detailed standards and training, to ensure employees understand their roles and responsibilities regarding security.

Ariso is responsible for designing, implementing, and documenting controls that are suitably designed to achieve our service commitments and system requirements based on applicable Trust Services Criteria. This Trust Center provides further detail on these practices, offering transparency into our dedication to protecting your information and maintaining your trust.