Built for Government-Grade Security
AskPortal is architected from the ground up to meet the security and compliance expectations of municipal governments and their citizens.
Security features
Data Isolation Per Municipality
Every municipality gets a completely isolated vector database collection. There is zero data co-mingling between customers — your content can never be accessed by, or inadvertently appear in responses for, any other municipality.
This multi-tenant isolation applies at the storage layer (vector DB), the API layer, and the AI context — your data is yours, completely partitioned.
No Citizen PII Stored in Vector DB
AskPortal only indexes your publicly available municipal content — ordinances, service descriptions, permit information. No personally identifiable information about citizens is ever stored in the vector database.
Chat transcripts are stored separately, encrypted at rest, and subject to your data retention policies. Citizens are not required to create accounts or share personal information to use the widget.
SOC 2 Ready Architecture
AskPortal's infrastructure is designed to meet SOC 2 Type II requirements. Our controls cover availability, security, processing integrity, confidentiality, and privacy — the five trust service criteria.
[PLACEHOLDER: SOC 2 certification status and audit timeline]
AWS Government-Grade Infrastructure
All data is hosted on Amazon Web Services, in US-based data centers. We leverage AWS's extensive compliance certifications — including FedRAMP-authorized services — as the foundation of our infrastructure.
Encryption in transit (TLS 1.2+) and at rest (AES-256) is enforced everywhere. AWS WAF, VPC isolation, and IAM least-privilege policies are standard, not optional.
Compliance Considerations
We understand that government procurement requires rigorous compliance review. Here's where we stand.
US-Only
Data residency in US East (Ohio) AWS region. No international data transfers.
AES-256
Encryption at rest for all stored data using industry-standard AES-256.
TLS 1.2+
All data in transit encrypted with TLS 1.2 or higher — no exceptions.
Have Security Questions?
Our team is happy to walk you through our security architecture, answer procurement questionnaires, or arrange a technical deep-dive.