Security & Compliance
Security & Compliance
Enterprise-grade security, compliance, and data governance capabilities
Zep provides comprehensive security controls and compliance capabilities designed for enterprises handling sensitive data. From granular access controls to customer-managed encryption keys, Zep enables you to meet your organization’s security and regulatory requirements.
SOC 2 Type II Certified — Zep maintains SOC 2 Type II certification. View our real-time compliance status at trust.getzep.com. Compliance reports and supporting documentation are available to Enterprise subscribers.
In Zep, governance lives in the substrate, not bolted on. Authorization, retention, and audit apply across every Context Graph, every query, and every layer of the Context Lake — so policy holds as you scale to thousands of agents, users, and context sources.
Access control & monitoring
Control who can access your data and track all activity across your organization.
Granular permissions with account-level and project-level scopes. Assign predefined roles to grant the right level of access to each teammate.
Track all dashboard member actions including logins, member management, API key changes, and data operations.
Monitor all SDK and API requests with details on method, endpoint, status, and latency.
Compliance & data governance
Meet regulatory requirements and maintain control over your data and AI infrastructure.
Guidelines for building healthcare applications that handle protected health information. Business Associate Agreements available for Enterprise customers.
Encrypt data at rest using your own AWS KMS Customer Master Key. Maintain full control over encryption keys, including revocation.
Use your own LLM provider credentials with OpenAI, Anthropic, Google, AWS Bedrock, or Azure. Apply your negotiated pricing and compliance commitments.
Deployment models
The trust boundary moves with your deployment. Choose where compute, data, and keys live.
Zep’s managed service. SOC 2 Type II certified, with HIPAA Business Associate Agreements available for Enterprise customers.
Zep’s managed service with encryption keys you control in your own AWS KMS account, including the ability to revoke access.
Zep deployed inside your own VPC for a full network and compliance boundary. Contact the Zep Enterprise team.