Trust Centre — Doc. AV-TC-01
Security, declared
in the open.
How Avow protects your data, who can see it, and what our agents may never do.
Fig. 1
A reviewer checks proposed agent changes before approving.
§ 01
Standards
Frameworks we
are working towards.
Example certifications.
S2
SOC 2 Type II
Example badge
ISO
ISO 27001
Example badge
EU
UK & EU GDPR
Example badge
CE
Cyber Essentials
Example badge
§ 02
Practices
How we protect
what you share.
Our controls.
2.1
Encryption
TLS 1.2+ in transit, AES-256 at rest.
2.2
Access control
Role-based access with SSO and named approvers.
2.3
Audit logging
Every agent action is logged in plain English and exportable.
2.4
Data residency
Data stored and processed in the UK and EU.
2.5
Incident response
A named on-call team and customer notice within 72 hours.
Fig. 2
Customer data stays in your workspace, never in shared training sets.
§ 03 — Your data
We never train shared models on your data.
Retention periods, deletion on request, where data is processed, and how long logs are kept.
Read our DPA
→
§ 04
Subprocessors
Who else
touches your data.
Current subprocessors.
NAME
PURPOSE
LOCATION
Cloud hosting (UK/EU)
Hosting & storage
UK / EU
Model provider (EU region)
Language model inference
EU
Transactional email
Transactional email
EU
Product analytics
Product analytics (opt-in)
EU
§ 05 — Security pack
Request our security
documentation.
Work email
name@company.com
Book a demo
→
Agents your risk team will sign off on.
Made in London. Data hosted in the UK and EU.
Avow
© 2026 Avow. Made in London.
Vol. 01
Trust-first AI agents
MENU
Trust Centre — Doc. AV-TC-01
Security, declared
in the open.
How Avow protects your data, who can see it, and what our agents may never do.
Fig. 1
A reviewer checks proposed agent changes before approving.
§ 01
Standards
Frameworks we
are working towards.
Example certifications.
S2
SOC 2 Type II
Example badge
ISO
ISO 27001
Example badge
EU
UK & EU GDPR
Example badge
CE
Cyber Essentials
Example badge
§ 02
Practices
How we protect
what you share.
Our controls.
2.1
Encryption
TLS 1.2+ in transit, AES-256 at rest.
2.2
Access control
Role-based access with SSO and named approvers.
2.3
Audit logging
Every agent action is logged in plain English and exportable.
2.4
Data residency
Data stored and processed in the UK and EU.
2.5
Incident response
A named on-call team and customer notice within 72 hours.
Fig. 2
Customer data stays in your workspace, never in shared training sets.
§ 03 — Your data
We never train shared models on your data.
Retention, deletion on request, processing locations.
Read our DPA
→
§ 04
Subprocessors
Who else
touches your data.
Current subprocessors.
Cloud hosting (UK/EU)
PURPOSE
Hosting & storage
LOCATION
UK / EU
Model provider (EU region)
PURPOSE
Inference
LOCATION
EU
Transactional email
PURPOSE
Transactional email
LOCATION
EU
Product analytics
PURPOSE
Product analytics (opt-in)
LOCATION
EU
Agents your risk team will sign off on.
Avow
© 2026 Avow. Made in London.
Vol. 01
Trust-first AI agents
MENU
Trust Centre — Doc. AV-TC-01
Security, declared
in the open.
How Avow protects your data, who can see it, and what our agents may never do.
Fig. 1
A reviewer checks proposed agent changes before approving.
§ 01
Standards
Frameworks we
are working towards.
Example certifications.
S2
SOC 2 Type II
Example badge
ISO
ISO 27001
Example badge
EU
UK & EU GDPR
Example badge
CE
Cyber Essentials
Example badge
§ 02
Practices
How we protect
what you share.
Our controls.
2.1
Encryption
TLS 1.2+ in transit, AES-256 at rest.
2.2
Access control
Role-based access with SSO and named approvers.
2.3
Audit logging
Every agent action is logged in plain English and exportable.
2.4
Data residency
Data stored and processed in the UK and EU.
2.5
Incident response
A named on-call team and customer notice within 72 hours.
Fig. 2
Customer data stays in your workspace, never in shared training sets.
§ 03 — Your data
We never train shared models on your data.
Retention, deletion on request, processing locations.
Read our DPA
→
§ 04
Subprocessors
Who else
touches your data.
Current subprocessors.
Cloud hosting (UK/EU)
PURPOSE
Hosting & storage
LOCATION
UK / EU
Model provider (EU region)
PURPOSE
Inference
LOCATION
EU
Transactional email
PURPOSE
Transactional email
LOCATION
EU
Product analytics
PURPOSE
Product analytics (opt-in)
LOCATION
EU
Agents your risk team will sign off on.
Avow
© 2026 Avow. Made in London.