Your security review, already answered.

Glass-box AI deserves glass-box security: the same transparency we put into every AI decision applies to how we run the company, certifications, audit reports, penetration tests and the complete policy library, current versions, core compliance documents open immediately, the rest a short form away. AI that acts on tickets, payroll questions and invoices needs controls you can check, not promises.

Certifications & audit reports

Independently assessed, re-audited on a fixed cadence. ISO 27001 and our HIPAA report are open downloads; the rest are a short form away.

ISO 27001 Certificate
ISO/IEC 27001 certification of the Rezolve.ai information security management system.
Download PDF ↗
ISO 27001 Certificate
India ISO/IEC 27001 certification of the Rezolve.ai information security management system.
Download PDF ↗
SOC 2 Type II Report 2026
Independent SOC 2 Type II audit covering security, availability and confidentiality controls.
Request PDF
GDPR Compliance Letter
Independent assessment report and letter of GDPR compliance.
Request PDF
HIPAA Compliance Report
Independent assessment of HIPAA safeguards and compliance posture.
Download PDF ↗
Web Application Penetration Test 2026
Latest third-party penetration test of the Rezolve.ai web application.
Request PDF
Mobile Application Penetration Test 2026
Latest third-party penetration test of the Rezolve.ai mobile apps.
Request PDF

Legal agreements

The paperwork your legal team will ask for, ready to review.

End User Agreement
The agreement governing use of the Rezolve.ai platform.
Download PDF ↗
Data Processing Addendum (DPA)
How we process personal data on your behalf, GDPR Article 28 terms.
Download PDF ↗
CCPA Notice
How we honor California Consumer Privacy Act rights and obligations.
Download PDF ↗

Policy library

Privacy & data protection

Privacy Policy What we collect, why, and how we protect it. v9 Request PDF
Cookie Policy The cookies we set and how to control them. v9 Request PDF
Data Protection Policy & Frameworks The framework governing how personal data is protected across the business. v9 Request PDF
Data Retention Policy How long each class of data is kept, and how it is disposed of. v9 Request PDF
Data Subject Rights Policy How access, correction, deletion and portability requests are honored. v9 Request PDF
Data Breach Policy & Procedures Detection, notification and response procedures for personal-data breaches. v9 Request PDF
Data Protection Impact Assessment Policy When and how DPIAs are run for new processing activities. v9 Request PDF
Cross-Border Transfer Policy Safeguards applied when personal data crosses borders. v9 Request PDF
Pseudonymization & Encryption Policy Where data is pseudonymized and encrypted at rest and in transit. v8 Request PDF
HIPAA Manual Administrative, physical and technical safeguards for PHI. v8 Request PDF
Interoperability & Portability Policy Standards for moving your data in and out of the platform. v4 Request PDF

Security operations

ISMS Manual The information security management system, end to end. v9 Request PDF
Information Security Roles & Responsibilities Who owns which security responsibility. v9 Request PDF
Risk Management Policy How risks are identified, scored, treated and reviewed. v9 Request PDF
Access Control Policy Least-privilege access, joiner-mover-leaver, and review cadence. v9 Request PDF
Password Administration Policy Password standards and credential handling. v9 Request PDF
Network Security Policy Segmentation, monitoring and perimeter controls. v9 Request PDF
Cryptography, Encryption & Key Management Policy Encryption standards and key lifecycle management. v3 Request PDF
Cryptography Management Policy Approved algorithms and cryptographic controls. v9 Request PDF
Patch Management Policy How fixes are prioritized, tested and rolled out. v9 Request PDF
Infrastructure Hardening Policy Baseline hardening standards for servers and services. v9 Request PDF
Change Management Policy Gated, reviewed, auditable production changes. v9 Request PDF
SDLC Policy Security built into every phase of the development lifecycle. v9 Request PDF
Third-Party Management Policy How vendors are assessed, contracted and monitored. v9 Request PDF
Device & Endpoint Management Policy Standards for company and BYO endpoints. v4 Request PDF
Physical & Environmental Control Policy Physical access and environmental protections. v7 Request PDF
Acceptable Use Policy Acceptable use of systems, data and services. v9 Request PDF
Clear Desk & Clean Screen Policy Workspace hygiene for information handling. v9 Request PDF
Approved Apps The vetted application catalog approved for company use. Request PDF

Continuity & incident response

Business Continuity & Disaster Recovery Plan How we keep service running through disruption. v10 Request PDF
Disaster Recovery Plan Recovery objectives, runbooks and roles. v9 Request PDF
Incident Response Plan How incidents are triaged, contained and communicated. Request PDF
Incident Management Policy The policy behind incident classification and handling. v9 Request PDF
Backup & Media Handling Policy Backup cadence, media handling and restoration testing. v9 Request PDF
BCP Drill Report Results of the 2024 business-continuity drill. 2024 Request PDF
BCP Drill Report, Communication & Network Outage Drill results: communication and network outage scenario. 2025 Request PDF
BCP Drill Report, Database Restoration Drill results: database restoration scenario. 2025 Request PDF

Company & conduct

Code of Conduct The standards every Rezolve.ai employee signs up to. v6 Request PDF
HR & People Code of Conduct Conduct standards for HR and people operations. v5 Request PDF
Human Resource Security Policy Security responsibilities through the employment lifecycle. v7 Request PDF
Human Resource Security Screening, onboarding and offboarding security controls. v8 Request PDF
Remote Working Policy Security standards for working outside the office. v8 Request PDF
Grievance Handling Policy How workplace grievances are raised and resolved. v9 Request PDF
Whistleblowing Policy Protected channels for reporting concerns. v9 Request PDF
Client Escalation Policy How client concerns are escalated and resolved. v9 Request PDF
Sustainability Policy Our environmental and sustainability commitments. v4 Request PDF
Vision & Mission The company vision and mission. v9 Request PDF