SOC 2 Type II
Immersa, the company behind MarcoPolo, is SOC 2 Type II compliant. The compliance report is available on request under NDA.
Security
Security and compliance
Understand access controls, workspace data handling, and audit evidence. Review the documentation and request the SOC 2 Type II report for your vendor assessment.
Request the SOC 2 report
Access and credentials
Identity, connection grants, and task scope
The caller’s identity determines which connections it may use. Source permissions apply through the credentials used for each connection, and configured task policies can narrow access further. Sharing a connection does not automatically reproduce each recipient’s personal source permissions.
Explore access controlCredentials stay out of the model
Credentials are encrypted and used only in a privileged execution layer. They are never passed to the model, written to logs or conversation history, or shared between users.
Credential security documentationWorkspace data and model training
Query results and files persist
Queries run against your existing systems. Retrieved results, downloaded files, scripts, and artifacts can persist in the workspace across sessions. Removing a connection stops new queries; previously saved results may remain in the workspace.
Data handling documentationNo training on your data
Your data, queries and results are never used to train AI models.
Data security documentationDeployment and oversight
Hosted or in your cloud
Use the hosted service, or deploy in your own AWS, Google Cloud or Azure environment, or on premises on VMware or OpenShift. VPC peering, PrivateLink and regional deployment are available.
Deployment documentationActivity and evidence for review
Review identity, connection, action, and outcome in activity records and OpenTelemetry logs and traces. Administrators can review organization activity and export the events shown. Full tool responses are not captured in traces by default. Support access to workspaces is restricted to authorized operations with audit logging.
Audit documentationQuestions about your deployment, data handling, or security assessment? Contact our team.