Security overview
How the product handles your data, encryption, access control, audit evidence, retention.
Trust Center
Trust Center
PathReader checks your employees' AI activity on their own devices. Prompts and files go from the device straight to your AI provider, under your account, and responses come straight back. PathReader receives evaluation metadata, not the content: which rules matched, when, and on which machine.
In the Trust Center
Compliance status
Current status of each security framework. We publish status, not dates.
Sub-processors
Who processes customer personal data, and what never reaches PathReader.
Frequently asked questions
Does PathReader see our employees' prompts and files?
No. They go straight to your AI provider under your account. PathReader receives evaluation metadata, not the content.
Does PathReader use its own AI provider key?
No. When you ask PathReader to extract rules, it uses an AI provider key you configure; there is no PathReader-key fallback.
Does an AI model decide whether a rule matched?
No. Rules are applied by deterministic policy evaluation: your published rules decide whether a rule matched, not a model. Your team approves every proposed rule before it takes effect.
How is our data protected?
Data is encrypted in transit and at rest, each workspace is isolated, and every sign-in requires multi-factor authentication. The Security overview has the details.
What is your compliance status?
Compliance status lists the current status of each security framework.
Why doesn't PathReader have a SOC 2 report yet?
We invested first in an architecture that keeps your employees' prompts and files out of our systems entirely; they go directly to your own AI provider. SOC 2 Type I and Type II are next, and we'll publish dates on Compliance status once they're committed.
Who processes our data?
Sub-processors lists who processes customer personal data, and what never reaches PathReader.
How do we get the security package?
Released documents are available in the gated security package section after you accept a non-disclosure agreement.
Security package
Security documents shared under NDA, as they’re released.
Report a security issue
Write to security@pathreader.ai.