Trust Center
Your security review, already answered. Glass-box AI deserves glass-box security: the same transparency we put into every AI decision applies to how we run the company, certifications, audit reports, penetration tests and the complete policy library, current versions, core compliance documents open immediately, the rest a short form away. AI that acts on tickets, payroll questions and invoices needs controls you can check, not promises.
Certifications & audit reports Independently assessed, re-audited on a fixed cadence. ISO 27001 and our HIPAA report are open downloads; the rest are a short form away.
Legal agreements The paperwork your legal team will ask for, ready to review.
Policy library All Privacy Security Continuity & IR Conduct
Privacy & data protection Privacy Policy What we collect, why, and how we protect it. v9 Cookie Policy The cookies we set and how to control them. v9 Data Protection Policy & Frameworks The framework governing how personal data is protected across the business. v9 Data Retention Policy How long each class of data is kept, and how it is disposed of. v9 Data Subject Rights Policy How access, correction, deletion and portability requests are honored. v9 Data Breach Policy & Procedures Detection, notification and response procedures for personal-data breaches. v9 Data Protection Impact Assessment Policy When and how DPIAs are run for new processing activities. v9 Cross-Border Transfer Policy Safeguards applied when personal data crosses borders. v9 Pseudonymization & Encryption Policy Where data is pseudonymized and encrypted at rest and in transit. v8 HIPAA Manual Administrative, physical and technical safeguards for PHI. v8 Interoperability & Portability Policy Standards for moving your data in and out of the platform. v4 Security operations ISMS Manual The information security management system, end to end. v9 Information Security Roles & Responsibilities Who owns which security responsibility. v9 Risk Management Policy How risks are identified, scored, treated and reviewed. v9 Access Control Policy Least-privilege access, joiner-mover-leaver, and review cadence. v9 Password Administration Policy Password standards and credential handling. v9 Network Security Policy Segmentation, monitoring and perimeter controls. v9 Cryptography, Encryption & Key Management Policy Encryption standards and key lifecycle management. v3 Cryptography Management Policy Approved algorithms and cryptographic controls. v9 Patch Management Policy How fixes are prioritized, tested and rolled out. v9 Infrastructure Hardening Policy Baseline hardening standards for servers and services. v9 Change Management Policy Gated, reviewed, auditable production changes. v9 SDLC Policy Security built into every phase of the development lifecycle. v9 Third-Party Management Policy How vendors are assessed, contracted and monitored. v9 Device & Endpoint Management Policy Standards for company and BYO endpoints. v4 Physical & Environmental Control Policy Physical access and environmental protections. v7 Acceptable Use Policy Acceptable use of systems, data and services. v9 Clear Desk & Clean Screen Policy Workspace hygiene for information handling. v9 Approved Apps The vetted application catalog approved for company use. Continuity & incident response Business Continuity & Disaster Recovery Plan How we keep service running through disruption. v10 Disaster Recovery Plan Recovery objectives, runbooks and roles. v9 Incident Response Plan How incidents are triaged, contained and communicated. Incident Management Policy The policy behind incident classification and handling. v9 Backup & Media Handling Policy Backup cadence, media handling and restoration testing. v9 BCP Drill Report Results of the 2024 business-continuity drill. 2024 BCP Drill Report, Communication & Network Outage Drill results: communication and network outage scenario. 2025 BCP Drill Report, Database Restoration Drill results: database restoration scenario. 2025 Company & conduct Code of Conduct The standards every Rezolve.ai employee signs up to. v6 HR & People Code of Conduct Conduct standards for HR and people operations. v5 Human Resource Security Policy Security responsibilities through the employment lifecycle. v7 Human Resource Security Screening, onboarding and offboarding security controls. v8 Remote Working Policy Security standards for working outside the office. v8 Grievance Handling Policy How workplace grievances are raised and resolved. v9 Whistleblowing Policy Protected channels for reporting concerns. v9 Client Escalation Policy How client concerns are escalated and resolved. v9 Sustainability Policy Our environmental and sustainability commitments. v4 Vision & Mission The company vision and mission. v9 