> ## Documentation Index
> Fetch the complete documentation index at: https://docs.plantpredict.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Security & Compliance
> Independent third-party security attestations, certifications, and security practices for the PlantPredict platform
PlantPredict is designed with security, reliability, and operational transparency as core principles. Our platform follows established security practices and undergoes independent third-party assessments to validate the effectiveness of our controls.
SOC 2 Type II
MSPAlliance Cyber Verify™ Level 3
Both assessments are performed in accordance with industry-leading frameworks: the [AICPA Trust Services Criteria](https://www.aicpa-cima.com/topic/audit-assurance/audit-and-assurance-greater-than-soc-2) (SOC 2) and the [MSPAlliance® Unified Certification Standard™](https://mspalliance.com/cyber-verify/) (UCS) for Cloud and Managed Service Providers.
***
## Independent Assessments
SOC 2 Type II
PlantPredict has completed a **SOC 2 Type II** examination covering controls related to:
* **Security**
* **Availability**
* **Confidentiality**
The assessment evaluates the design and operating effectiveness of controls over a defined review period and helps ensure that PlantPredict maintains effective operational and technical safeguards.
SOC 2 Type II reports are available to qualified customers and prospects under NDA.
MSPAlliance Cyber Verify™ Level 3
PlantPredict has also completed the **MSPAlliance Cyber Verify™ Level 3** assessment, an independent verification program for cloud and managed service providers. The assessment evaluates operational and security practices across governance, change management, service operations, information security, backup and recovery, and related controls.
Unlike point-in-time certifications, **Cyber Verify Level 3** includes testing over a defined review period to validate that controls are operating effectively.
Cyber Verify Level 3 reports are available upon request for qualified security reviews and due diligence processes.
***
## Security Practices
PlantPredict maintains layered administrative, technical, and operational safeguards including:
MFA is supported for user authentication to help protect against unauthorized account access.
RBAC restricts access to data and administrative functions based on user role and organizational membership.
Customer data is encrypted in transit using TLS and at rest using industry-standard cryptographic algorithms.
PlantPredict runs on enterprise-grade cloud infrastructure with hardened network and platform controls.
Automated backup and recovery procedures support data durability and business-continuity objectives.
Structured change management and documented security policies govern platform operations and updates.
***
## Cloud Infrastructure
PlantPredict leverages enterprise-grade cloud infrastructure providers to support **scalability**, **resiliency**, and **security** for customer workloads. The underlying infrastructure providers maintain their own independent compliance programs (e.g., SOC, ISO 27001) that complement PlantPredict's platform-level attestations.
Run on **Microsoft Azure**.
See the [Microsoft Azure ISO 27001 certification](https://servicetrust.microsoft.com/DocumentPage/1be7b58c-ecff-4e91-8122-a4886b1d06c5).
Run on **Amazon Web Services (AWS)**.
See the [AWS ISO 27001 certificate](https://d1.awsstatic.com/onedam/marketing-channels/website/aws/en_US/certification/compliance/iso_27001_global_certification.pdf).
***
## Requesting Compliance Documentation
The following materials are available to qualified customers and prospects during security review processes:
| Document | Availability |
| -------------------------------- | ----------------------------------------------------- |
| **Cyber Verify™ Level 3 Report** | Available without NDA through controlled distribution |
| **SOC 2 Type II Report** | Available under NDA |
To request compliance documentation or coordinate a security review, contact **[support@plantpredict.com](mailto:support@plantpredict.com)**.
These attestations apply specifically to the PlantPredict platform and associated operational services.
