Available on request
Security documents
- A standard DPA exists, available on request.
- We sign a BAA with healthcare customers; ask for our template.
- The annual third-party penetration test summary is available on request.
- Available on request.
SUPERWISE signs a Business Associate Agreement with healthcare customers, and the scope is confirmed during scoping.
Core safeguards
Security controls
TLS for all communication
Encryption at rest
OAuth and SAML single sign-on
Multi-factor authentication
Service providers
Subprocessors
| Name | Purpose | Location |
|---|---|---|
| Google Cloud | Control plane; Sentinel metadata | us-central1 |
| Stripe | Billing | United States |
| HubSpot | Contact data | United States |
| 365 Data Centers | Hosts SUPERWISE's equipment for the hosted model in a secure cage | Nashville, Tennessee |
Data boundaries
How each product handles data
Sentinel
Prompts go straight to the AI provider; SUPERWISE receives only check metadata.
The all-users installer is planned for the week of November 16. Admin control of users' Pause is planned for it, with no date yet. Admins can stop users uninstalling Sentinel through device management, such as Microsoft Intune, or Windows permission settings.
Chat
The model is gpt-oss-120b. Hosted by SUPERWISE in a secure cage at 365 Data Centers, Nashville, Tennessee.
Documents uploaded to Chat and knowledge collections are stored in SUPERWISE's own Google Cloud environment. Conversations are kept for the life of the customer's account by default; admins can set a shorter period. Conversations are directly accessible only by the customer's administrator, and that access is an audited event. If SUPERWISE support needs access, that is also audited and the customer is notified. Content is not used to train someone else's model.
Subject to change as models advance.
Platform (AMP)
Prompts stay in the customer’s environment.
Configuration and metadata sync to the SUPERWISE control plane.
Audit trail
The record
- Each Sentinel event identifies the Sentinel that handled it (the protected computer or gateway, by its name), not the person using it.
- Kept for one year while the customer's account is active.
- Viewable and reportable in the SUPERWISE app today; export to a SIEM is on the roadmap.
Architecture
Deployment options
Enterprise offers Isolated SaaS and Private SaaS. SUPERWISE Chat can be deployed air-gapped as a custom installation with customer-chosen models. Sentinel and the platform are not air-gapped: prompts stay in the customer's environment; configuration and metadata sync to the SUPERWISE control plane.
Incident response
Breach notification
If we confirm a security incident that affects your data, we notify you within 72 hours.
The BAA carries the same 72-hour notice.
Customer notice
Legal holds and subpoenas
SUPERWISE notifies the customer of a subpoena unless the law forbids it. SUPERWISE supports legal holds on request.
Who we are
Company
SUPERWISE® is a trade name of Deep Insight Solutions, Inc., headquartered in Nashville, Tennessee. SUPERWISE was founded in 2017; the company acquired it in 2023 while doing business as Blattner Technologies, and took the SUPERWISE name. About SUPERWISE.