Security your team can verify.
Tobie is built for the people who have to sign off: IT, security, and procurement. Here’s exactly where we stand. No vague badges.
- SOC 2-certified infrastructure
- SOC 2 Type I in progress
- Encrypted in transit and at rest
- HIPAA support under a signed BAA, scoped to your environment
- US-hosted
How Tobie protects your data.
A handful of deliberate choices from the model up that keep your benefits data grounded, isolated, and accountable.
Source-grounded by design
Answers are drawn from the benefits documents you approve, and Tobie is designed to refuse or escalate when those documents do not cover a question. The assistant runs on Anthropic’s Claude Haiku 5.5, with Google’s Gemini as a backup. Additional model providers, including OpenAI, are on our roadmap. Tobie does not use your content to train models, and conversation data carries a short retention window we can review with your team.
Encryption everywhere
Data is encrypted the moment it moves and the moment it rests. TLS protects every connection in transit; AES-256 protects everything stored at rest.
Tenant isolation
Each customer’s data is separated at the database level using Postgres row-level security. Your data is logically yours alone.
Access & oversight
Role-based admin controls who can see and change what, and your team can review the answers Tobie gives from the admin dashboard.
Trusted infrastructure
Our hosting, database, AI, and edge providers (Vercel, Supabase, Google, Anthropic, and Cloudflare) are each independently SOC 2-certified.
Where we are with SOC 2.
Most vendors show you a badge and stop. We’d rather show you the whole path, because the willingness to be precise is itself the trust signal.
SOC 2-certified infrastructure
Our hosting, database, AI, and edge providers are SOC 2-certified, and our own controls are in active build against the Trust Services Criteria.
SOC 2 Type I
Our independent Type I examination is underway, with a target completion in Q4 2026. We can share interim documentation with reviewers under NDA.
SOC 2 Type II
Following Type I, we move into the observation period for Type II, demonstrating our controls operating consistently over time.
The status above is current and maintained. Ask us where we are today. You’ll get a straight answer, in writing. Status last reviewed: September 2026.
HIPAA and your data.
We support our customers’ HIPAA obligations under a signed Business Associate Agreement, scoped to your environment. Benefits information is handled under the minimum-necessary principle, and the app is built so that identifiable health information is not retained: health mentions in Ask Tobie are generalized before storage, and health disclosures in feed comments are blocked rather than stored. Tell us about your PHI requirements and we’ll review with your team exactly how Tobie handles them.
Our subprocessors.
A complete, current list of the subprocessors Tobie relies on, what each one does, and the data it handles.
Request our security packet.
The detailed documentation procurement and security teams need: architecture overview, data-flow diagrams, control mappings, and our subprocessor agreements, shared under NDA.
Or send your security questionnaire straight to us. The willingness to answer precisely is the point.
Or email security@tobie.team