Trust Center

Welcome to our Trust Center. At Foresight, we prioritize the security, privacy, and reliability of our services. We adhere to stringent standards to protect your data and ensure the highest level of trust and transparency. This page provides an overview of our security and compliance measures.

1. SOC 2 Report

Foresight is built with enterprise-level security at its core. Our SOC 2 Type II attestation report - verified by independent auditors - demonstrates that our controls for security, availability, and confidentiality operate effectively and continuously protect customer data.

‍

Developed by the Assurance Services Executive Committee (ASEC) of the AICPA, the Trust Services Criteria is the set of control criteria to be used when evaluating the suitability of the design and operating effectiveness of controls relevant to the security, availability, or processing integrity of information and systems, or the confidentiality or privacy of the information processed by the systems at an entity, a division, or an operating unit of an entity.

Continuous Security Control Monitoring

Foresight uses Drata’s automation platform to continuously monitor 100+ security controls across the organization. Automated alerts and evidence collection allows Foresight to confidently prove its security and compliance posture any day of the year, while fostering a security-first mindset and culture of compliance across the organization.

2. Security Controls

We have implemented a comprehensive set of security controls to safeguard your data from unauthorized access, disclosure, alteration, and destruction.

‍

Our security measures include:

‍

• Physical Security: Our facilities are protected by strict access controls, ‍surveillance systems, and other physical security measures to prevent ‍unauthorized entry.
• Network Security: We utilize firewalls, intrusion detection and prevention  systems, and advanced network security mechanisms to protect our  infrastructure from external threats.
• Data Encryption: We employ encryption technologies to secure data ‍transmission over networks.
• Access Controls: We enforce strong authentication mechanisms, access ‍controls, and user permissions to ensure that only authorized individuals ‍have access to your data.
• Incident Response: We maintain an incident response plan to promptly ‍identify, mitigate, and recover from security incidents, minimizing the impact ‍on our systems and your data

3. Data Privacy

We are committed to protecting your privacy and handling your data in compliance with applicable data protection laws.

‍

Our privacy practices include:

‍

• Data Collection and Usage: We collect and process your personal data only ‍for specified and legitimate purposes, and we adhere to data minimization ‍principles.
• Data Retention: We retain your data for the necessary duration as outlined in our data retention policy, ensuring compliance with legal and regulatory requirements.
• Third-Party Data Processors: We carefully select and evaluate our third-party  vendors and service providers to ensure they meet our data protection and  security standards.
• Data Subject Rights: We respect your rights regarding your personal data,  including the right to access, rectify, delete, and restrict its processing. Please refer to our Privacy Policy for more information on exercising your rights.

4. Contact Us

If you have any questions or concerns regarding our security, compliance, or privacy practices, please contact our Trust Center team: privacy@foresight.ai

‍

We appreciate your trust in Foresight. We continuously strive to maintain the highest standards of security, privacy, and compliance to ensure the protection and confidentiality of your data.