Intercepta AI handles compliance content for marketing teams in regulated industries. We treat every byte the way our customers' regulators expect us to.
All workloads run on Microsoft Azure with US-only regions and zone-redundant deployments. No customer data leaves North America.
Data is encrypted at rest with AES-256 and in transit with TLS 1.3. Keys are rotated automatically and managed in Azure Key Vault.
Role-based access control across every internal system, mandatory MFA for all employees, principle of least privilege enforced quarterly.
Every scan, login, export, and configuration change is logged to an append-only store which also includes scans triggered by AI agents over MCP. Retention: 13 months.
Always-on application and infrastructure monitoring. Ack within 2h, resolve within 72h.
Static analysis on every commit and dependency scanning daily. Critical patches ship within 72 hours.
01. Ingest — Content is sent over TLS 1.3 to a US-region endpoint. Free-tier scans are processed in memory only.
02. Analyze — Our agents check the content against the encoded rule library. No prompts or content are used to train models.
03. Return — Findings, citations, and suggested rewrites are returned to the requester. Reports belong to the customer.
04. Retain or discard — Free tier discards content after analysis. Paid tiers retain on a customer-configured schedule (default 30 days).
Private cloud — deploy Intercepta AI into your own Azure tenant. SSO — SAML 2.0 with Okta, Azure AD, Google Workspace available on request. DPA — Data Processing Addenda for regulated jurisdictions.
Found a vulnerability? Email security@intercepta.ai with reproduction steps. Acknowledgement within 1 business day. Triage within 5 business days.