Trust Center

Welcome to the CurrentWave AI Trust Center. This public portal is designed to provide our customers, partners, and visitors with a clear, transparent, and comprehensive overview of our security, compliance, and trust practices.

Who We Are and What We Do

CurrentWave AI provides grounded knowledge-management assistants—including our employee-facing conversational knowledge assistant, CXplainAI (being renamed CurrentWave Portal), and our optional customer-facing chat assistant, CXchatAI (being renamed CurrentWave Chat). Our systems are designed to answer questions using content directly supplied by our client organizations, and they are not designed or intended to make or recommend decisions about individuals.

Our Commitment to Trust and Security

At CurrentWave AI, we believe that robust security and ethical practices are foundational to our business. We protect our systems and client data against unauthorized access, disclosure, and damage through a combination of strong internal controls, active governance, and continuous monitoring.

Our trust posture is built upon several key pillars:

• Independent Assurance & Certifications: We maintain a SOC 2 Type 2 examination (covering the Trust Services Criteria relevant to Security) to verify the suitability of the design and operating effectiveness of our controls.
• Proactive Security Practices: To ensure our defenses remain strong, we undergo annual third-party penetration testing, perform monthly vulnerability scanning, and carry cyber-liability insurance.
• Continuous Compliance Monitoring: We utilize Drata, a compliance automation platform, to continuously monitor our information assets across our infrastructure, identity management, code repositories, and endpoint devices.
• Secure Infrastructure: All of our data is hosted by Microsoft Azure, utilizing secure data centers that do not allow physical access to CurrentWave AI employees. As a fully remote company, we do not maintain physical office spaces.
• Active AI Governance: We enforce strict AI governance practices, which include logging model changes, conducting annual AI risk assessments, and maintaining detailed interaction logs (recording the questions asked, answers provided, and sources used) to ensure platform accountability and answer provenance.
• Organizational Integrity: Our security controls are supported by a strong internal culture, comprehensive employee training, and documented policies and procedures that are reviewed and approved by our Management Team at least annually.

Purpose and Scope of the Trust Center

The purpose of this Trust Center is to serve as a central, transparent repository for our security and compliance documentation. Here, you can access our independent assurance artifacts—including our SOC 2 Type 2 reports, third-party penetration-test attestations, and our published subprocessor list—giving you the visibility you need to confidently assess the risks and security of our systems.