1<!DOCTYPE html><html data-dpl-id="dpl_DdyQs5oWUKS82Qio7Q3BszZnQtku" lang="en" class="figtree_de99100f-module__-w-5uq__variable jetbrains_mono_82c618bd-module__kTeI0q__variable"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/_next/static/immutable/media/70bc3e132a0a741e-s.p.269kn9uafm0ti.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/immutable/media/f7aa21714c1c53f8-s.p.0jgzmitmnoe6_.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="stylesheet" href="/_next/static/immutable/chunks/2k5vpzruj-klm.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/immutable/chunks/1iapq0ckx7bbm.js"/>
1<script src="/_next/static/immutable/chunks/16crgau7ptqc3.js" async=""></script>
1<script src="/_next/static/immutable/chunks/3kae37sq6kutg.js" async=""></script>
1<script src="/_next/static/immutable/chunks/2hs4g1-dwx-vl.js" async=""></script>
1<script src="/_next/static/immutable/chunks/turbopack-0ovrz-l6k_5rv.js" async=""></script>
1<script src="/_next/static/immutable/chunks/0xtru6rvce1rm.js" async=""></script>
1<script src="/_next/static/immutable/chunks/06mviu-q11quh.js" async=""></script>
1<title>Security â Traack</title><meta name="description" content="We build custom AI workflows that do the busy work of internal auditing and SOX compliance evidence gathering. Zero data retention and SOC 2 compliant."/><meta property="og:title" content="Traack â AI agents for internal audit and SOX compliance teams"/><meta property="og:description" content="Custom AI workflows that do the busy work of internal auditing and SOX compliance evidence gathering."/><meta property="og:type" content="website"/><meta name="twitter:card" content="summary"/><meta name="twitter:title" content="Traack â AI agents for internal audit and SOX compliance teams"/><meta name="twitter:description" content="Custom AI workflows that do the busy work of internal auditing and SOX compliance evidence gathering."/><link rel="icon" href="/icon.svg?icon.0dk1pt81a6_5w.svg" sizes="any" type="image/svg+xml"/><link rel="apple-touch-icon" href="/apple-icon.png?apple-icon.3xf1gsln7cx42.png" sizes="180x180" type="image/png"/><meta name="next-size-adjust" content=""/>
1<script src="/_next/static/immutable/chunks/0c0hxoamwjsbw.js" noModule=""></script>
1</head><body class="bg-tr-bg text-tr-fg antialiased"><div hidden=""><!--$--><!--/$--></div><main class="flex min-h-dvh flex-col"><header class="mx-auto flex h-[68px] w-full max-w-[1120px] items-center justify-between px-6"><a href="/"><span class="inline-flex items-center" style="gap:13px"><svg aria-hidden="true" height="26" viewBox="0 0 64 64" width="26" xmlns="http://www.w3.org/2000/svg"><circle cx="32" cy="32" fill="none" r="29.6" stroke="#25293a" stroke-width="3.2"></circle><path d="M15.9 18H46.4V24.6H35.9V24.6H29.5L35.2 28.7V50.5H32.3L27 46.6V24.6H15.9Z" fill="#25293a" stroke="#25293a" stroke-linejoin="round" stroke-width="1.6"></path><circle cx="41.2" cy="46.9" fill="#4f7fcf" r="3.2"></circle></svg><span class="text-tr-fg" style="font-size:23.400000000000002px;font-weight:600;letter-spacing:-0.03em;line-height:1">traack</span></span></a><nav class="flex items-center gap-6 text-[15px] text-tr-fg2"><a class="hover:text-tr-fg" href="https://cloud.traack.ai/login">Log in</a><a class="rounded-[9px] bg-tr-accent px-4 py-2 font-medium text-white hover:opacity-90" rel="noopener" target="_blank" href="https://calendar.google.com/appointments/schedules/AcZssZ3fpp49V_X2FmE5o5hoRTHB6ADzoIdQXI9WCn0PHBfSS14rTonkU68xL8iVcJJQnduNfIp4P4ym">Book a demo</a></nav></header><article class="mx-auto flex w-full max-w-[720px] flex-col gap-10 px-6 pt-14 pb-24"><div class="flex flex-col gap-3"><h1 class="font-semibold text-[40px] leading-[1.1] tracking-[-0.03em] max-md:text-[32px]">Security</h1><p class="text-[17px] text-tr-fg2 leading-[1.6]">How Traack protects the evidence you trust it with.</p><p class="font-mono text-[12.5px] text-tr-fg3">Last updated <!-- -->7 September 2026</p></div><section class="flex flex-col gap-3"><h2 class="font-semibold text-[22px] tracking-[-0.02em]">Our approach</h2><p class="text-[16px] text-tr-fg2 leading-[1.65]">Audit evidence is sensitive by definition. It names people, shows how money moves and records where controls failed. Traack is built so that your team can answer your own auditors' questions about where that evidence went, who touched it and what was done with it.</p><p class="text-[16px] text-tr-fg2 leading-[1.65]">This page describes the controls we operate today. Customers under NDA can request our SOC 2 Type II report, penetration test summaries and subprocessor list from their account contact.</p></section><section class="flex flex-col gap-3"><h2 class="font-semibold text-[22px] tracking-[-0.02em]">Data protection</h2><ul class="flex list-disc flex-col gap-1.5 pl-5 text-[16px] text-tr-fg2 leading-[1.65]"><li>Encrypted in transit with TLS 1.2 or later and at rest with AES-256, including uploaded files, sandbox contents, database records and backups.</li><li>
1Each person works in an isolated workspace with its own sandbox and file storage. Evidence never crosses between people, teams or client organisations.</li><li>Production infrastructure runs on SOC 2 and ISO 27001 certified cloud providers. We hold no physical infrastructure.</li><li>Secrets and integration credentials are stored in a managed secrets store, never in code, logs or the sandbox.</li></ul></section><section class="flex flex-col gap-3"><h2 class="font-semibold text-[22px] tracking-[-0.02em]">Access control</h2><ul class="flex list-disc flex-col gap-1.5 pl-5 text-[16px] text-tr-fg2 leading-[1.65]"><li>Sign in through Google or a one-time email code. Traack never stores passwords. Single sign-on through your identity provider is available for organisations.</li><li>Access to production systems by Traack staff requires hardware-backed multi-factor authentication and is limited to the people who operate the service.</li><li>Every administrative action on your account, and every action the agent takes, is written to an audit log you can review and export.</li></ul></section><section class="flex flex-col gap-3"><h2 class="font-semibold text-[22px] tracking-[-0.02em]">How the agent behaves</h2><ul class="flex list-disc flex-col gap-1.5 pl-5 text-[16px] text-tr-fg2 leading-[1.65]"><li>The agent reads by default. Any action that would send, change or delete in a connected system stops and asks for your approval first, and the audit log records who agreed.</li><li>Every command the agent runs, every query it makes and every raw response it receives is recorded and replayable, so an external auditor can see exactly what was done, on which records and when.</li><li>Integrations use scoped OAuth grants. You can revoke any integration at any time from the app or from the source system.</li></ul></section><section class="flex flex-col gap-3"><h2 class="font-semibold text-[22px] tracking-[-0.02em]">Data retention</h2><ul class="flex list-disc flex-col gap-1.5 pl-5 text-[16px] text-tr-fg2 leading-[1.65]"><li>Your evidence is processed for your engagement and nothing else. It is never used to train any model, ours or a third party's.</li><li>Model providers we use operate under zero data retention agreements. Prompts and responses are not stored by the provider after the request completes.</li><li>You control retention. Files and threads are deleted when you delete them, and your whole workspace is deleted within 30 days of a written request or the end of your contract.</li></ul></section><section class="flex flex-col gap-3"><h2 class="font-semibold text-[22px] tracking-[-0.02em]">Incident response</h2><p class="text-[16px] text-tr-fg2 leading-[1.65]">We monitor the service continuously and run an incident response process with defined severity levels. If an incident affects your data we will notify your account contact without undue delay, and in any case within 72 hours of confirming it, with what happened, what was affected and what we are doing about it.</p></section><section class="flex flex-col gap-3"><h2 class="font-semibold text-[22px] tracking-[-0.02em]">Reporting a vulnerability</h2><p class="text-[16px] text-tr-fg2 leading-[1.65]">If you believe you have found a vulnerability in Traack, email [email protected]. We acknowledge reports within two business days and will not take legal action against good-faith research that respects our customers' data. Please do not access data that is not yours and do not run automated scanners against production.</p></section></article><footer class="mx-auto flex w-full max-w-[1120px] flex-wrap items-center justify-between gap-4 px-6 py-8 text-[13px] text-tr-fg3"><span class="flex items-center gap-2"><svg aria-hidden="true" height="16" viewBox="0 0 64 64" width="16" xmlns="http://www.w3.org/2000/svg"><circle cx="32" cy="32" fill="none" r="29.6" stroke="#25293a" stroke-width="3.2"></circle><path d="M15.9 18H46.4V24.6H35.9V24.6H29.5L35.2 28.7V50.5H32.3L27 46.6V24.6H15.9Z" fill="#25293a" stroke="#25293a" stroke-linejoin="round" stroke-width="1.6"></path><circle cx="41.2" cy="46.9" fill="#4f7fcf" r="3.2"></circle></svg>© <!-- -->2026<!-- --> Traack</span><div class="flex flex-wrap gap-x-14 gap-y-6"><div class="flex flex-col gap-2"><a class="hover:text-tr-fg" href="/security">Security</a><a class="hover:text-tr-fg" href="/terms">Terms of service</a><a class="hover:text-tr-fg" href="/privacy">Privacy policy</a></div><div class="flex flex-col gap-2"><a class="hover:text-tr-fg" href="/traack-vs-copilot">Traack vs Microsoft Copilot</a><a class="hover:text-tr-fg" href="/traack-vs-chatgpt">
1Traack vs ChatGPT</a></div></div></footer></main><!--$--><!--/$-->
1<script src="/_next/static/immutable/chunks/1iapq0ckx7bbm.js" id="_R_" async=""></script>
1<script>(self.__next_f=self.__next_f||[]).push([0])</script>
1<script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[40629,[\"/_next/static/immutable/chunks/0xtru6rvce1rm.js\"],\"default\"]\n3:I[36699,[\"/_next/static/immutable/chunks/0xtru6rvce1rm.js\"],\"default\"]\n4:I[3426,[\"/_next/static/immutable/chunks/0xtru6rvce1rm.js\",\"/_next/static/immutable/chunks/06mviu-q11quh.js\"],\"\"]\n12:I[30825,[\"/_next/static/immutable/chunks/0xtru6rvce1rm.js\"],\"default\",1]\n:HL[\"/_next/static/immutable/chunks/2k5vpzruj-klm.css\",\"style\"]\n:HL[\"/_next/static/immutable/media/70bc3e132a0a741e-s.p.269kn9uafm0ti.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/immutable/media/f7aa21714c1c53f8-s.p.0jgzmitmnoe6_.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n10:X\n0:{\"P\":null,\"c\":[\"\",\"security\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"security\",{\"children\":[\"__PAGE__\",{},\"$undefined\",\"$undefined\",4608]},\"$undefined\",\"$undefined\",4608]},\"$undefined\",\"$undefined\",4624],[[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/immutable/chunks/2k5vpzruj-klm.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/immutable/chunks/0xtru6rvce1rm.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"html\",null,{\"lang\":\"en\",\"className\":\"figtree_de99100f-module__-w-5uq__variable jetbrains_mono_82c618bd-module__kTeI0q__variable\",\"children\":[\"$\",\"body\",null,{\"className\":\"bg-tr-bg text-tr-fg antialiased\",\"children\":[\"$\",\"$L2\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L3\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":[[[\"$\",\"title\",null,{\"children\":\"404: This page could not be found.\"}],[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"padding\":\"0 23px 0 0\",\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\",\"lineHeight\":\"49px\"},\"children\":404}],[\"$\",\"div\",null,{\"style\":{\"display\":\"inline-block\"},\"children\":[\"$\",\"h2\",null,{\"style\":{\"fontSize\":14,\"fontWeight\":400,\"lineHeight\":\"49px\",\"margin\":0},\"children\":\"This page could not be found.\"}]}]]}]}]],[]],\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]}]}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L2\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L3\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[[\"$\",\"main\",null,{\"className\":\"flex min-h-dvh flex-col\",\"children\":[[\"$\",\"header\",null,{\"className\":\"mx-auto flex h-[68px] w-full max-w-[1120px] items-center justify-between px-6\",\"children\":[[\"$\",\"$L4\",null,{\"href\":\"/\",\"children\":[\"$\",\"span\",null,{\"className\":\"inline-flex items-center\",\"style\":{\"gap\":13},\"children\":[[\"$\",\"svg\",null,{\"aria-hidden\":true,\"height\":26,\"viewBox\":\"0 0 64 64\",\"width\":26,\"xmlns\":\"http://www.w3.org/2000/svg\",\"children\":[[\"$\",\"circle\",null,{\"cx\":\"32\",\"cy\":\"32\",\"fill\":\"none\",\"r\":\"29.6\",\"stroke\":\"#25293a\",\"strokeWidth\":\"3.2\"}],[\"$\",\"path\",null,{\"d\":\"M15.9 18H46.4V24.6H35.9V24.6H29.5L35.2 28.7V50.5H32.3L27 46.6V24.6H15.9Z\",\"fill\":\"#25293a\",\"stroke\":\"#25293a\",\"strokeLinejoin\":\"round\",\"strokeWidth\":\"1.6\"}],[\"$\",\"circle\",null,{\"cx\":\"41.2\",\"cy\":\"46.9\",\"fill\":\"#4f7fcf\",\"r\":\"3.2\"}]]}],[\"$\",\"span\",null,{\"className\":\"text-tr-fg\",\"style\":{\"fontSize\":23.400000000000002,\"fontWeight\":600,\"letterSpacing\":\"-0.03em\",\"lineHeight\"
1:1},\"children\":\"traack\"}]]}]}],[\"$\",\"nav\",null,{\"className\":\"flex items-center gap-6 text-[15px] text-tr-fg2\",\"children\":[[\"$\",\"$L4\",null,{\"className\":\"hover:text-tr-fg\",\"href\":\"https://cloud.traack.ai/login\",\"children\":\"Log in\"}],[\"$\",\"$L4\",null,{\"className\":\"rounded-[9px] bg-tr-accent px-4 py-2 font-medium text-white hover:opacity-90\",\"href\":\"https://calendar.google.com/appointments/schedules/AcZssZ3fpp49V_X2FmE5o5hoRTHB6ADzoIdQXI9WCn0PHBfSS14rTonkU68xL8iVcJJQnduNfIp4P4ym\",\"rel\":\"noopener\",\"target\":\"_blank\",\"children\":\"Book a demo\"}]]}]]}],[\"$\",\"article\",null,{\"className\":\"mx-auto flex w-full max-w-[720px] flex-col gap-10 px-6 pt-14 pb-24\",\"children\":[[\"$\",\"div\",null,{\"className\":\"flex flex-col gap-3\",\"children\":[[\"$\",\"h1\",null,{\"className\":\"font-semibold text-[40px] leading-[1.1] tracking-[-0.03em] max-md:text-[32px]\",\"children\":\"Security\"}],[\"$\",\"p\",null,{\"className\":\"text-[17px] text-tr-fg2 leading-[1.6]\",\"children\":\"How Traack protects the evidence you trust it with.\"}],[\"$\",\"p\",null,{\"className\":\"font-mono text-[12.5px] text-tr-fg3\",\"children\":[\"Last updated \",\"7 September 2026\"]}]]}],\"$undefined\",[[\"$\",\"section\",\"Our approach\",{\"className\":\"flex flex-col gap-3\",\"children\":[[\"$\",\"h2\",null,{\"className\":\"font-semibold text-[22px] tracking-[-0.02em]\",\"children\":\"Our approach\"}],[\"$L5\",\"$L6\"],null,null,null,null,null]}],\"$L7\",\"$L8\",\"$L9\",\"$La\",\"$Lb\",\"$Lc\"]]}],\"$Ld\"]}],[\"$Le\"],\"$Lf\"]}],{},null,false,null]},null,false,\"$10\"]},null,false,null],\"$L11\",false]],\"m\":\"$undefined\",\"G\":[\"$12\",[\"$L13\"]],\"S\":true,\"h\":null,\"r\":\"$undefined\",\"s\":\"$undefined\",\"a\":\"$undefined\",\"l\":\"$undefined\",\"p\":\"$undefined\",\"d\":\"$undefined\"}\n14:I[54285,[\"/_next/static/immutable/chunks/0xtru6rvce1rm.js\"],\"OutletBoundary\"]\n15:\"$Sreact.suspense\"\n17:I[54285,[\"/_next/static/immutable/chunks/0xtru6rvce1rm.js\"],\"ViewportBoundary\"]\n19:I[54285,[\"/_next/static/immutable/chunks/0xtru6rvce1rm.js\"],\"MetadataBoundary\"]\n5:[\"$\",\"p\",\"Audit evidence is sensitive by definition. It names people, shows how money moves and records where controls failed. Traack is built so that your team can answer your own auditors' questions about where that evidence went, who touched it and what was done with it.\",{\"className\":\"text-[16px] text-tr-fg2 leading-[1.65]\",\"children\":\"Audit evidence is sensitive by definition. It names people, shows how money moves and records where controls failed. Traack is built so that your team can answer your own auditors' questions about where that evidence went, who touched it and what was done with it.\"}]\n6:[\"$\",\"p\",\"This page describes the controls we operate today. Customers under NDA can request our SOC 2 Type II report, penetration test summaries and subprocessor list from their account contact.\",{\"className\":\"text-[16px] text-tr-fg2 leading-[1.65]\",\"children\":\"This page describes the controls we operate today. Customers under NDA can request our SOC 2 Type II report, penetration test summaries and subprocessor list from their account contact.\"}]\n7:[\"$\",\"section\",\"Data protection\",{\"className\":\"flex flex-col gap-3\",\"children\":[[\"$\",\"h2\",null,{\"className\":\"font-semibold text-[22px] tracking-[-0.02em]\",\"children\":\"Data protection\"}],[],[\"$\",\"ul\",null,{\"className\":\"flex list-disc flex-col gap-1.5 pl-5 text-[16px] text-tr-fg2 leading-[1.65]\",\"children\":[[\"$\",\"li\",\"Encrypted in transit with TLS 1.2 or later and at rest with AES-256, including uploaded files, sandbox contents, database records and backups.\",{\"children\":\"Encrypted in transit with TLS 1.2 or later and at rest with AES-256, including uploaded files, sandbox contents, database records and backups.\"}
1],[\"$\",\"li\",\"Each person works in an isolated workspace with its own sandbox and file storage. Evidence never crosses between people, teams or client organisations.\",{\"children\":\"Each person works in an isolated workspace with its own sandbox and file storage. Evidence never crosses between people, teams or client organisations.\"}],[\"$\",\"li\",\"Production infrastructure runs on SOC 2 and ISO 27001 certified cloud providers. We hold no physical infrastructure.\",{\"children\":\"Production infrastructure runs on SOC 2 and ISO 27001 certified cloud providers. We hold no physical infrastructure.\"}],[\"$\",\"li\",\"Secrets and integration credentials are stored in a managed secrets store, never in code, logs or the sandbox.\",{\"children\":\"Secrets and integration credentials are stored in a managed secrets store, never in code, logs or the sandbox.\"}]]}],null,null,null,null]}]\n8:[\"$\",\"section\",\"Access control\",{\"className\":\"flex flex-col gap-3\",\"children\":[[\"$\",\"h2\",null,{\"className\":\"font-semibold text-[22px] tracking-[-0.02em]\",\"children\":\"Access control\"}],[],[\"$\",\"ul\",null,{\"className\":\"flex list-disc flex-col gap-1.5 pl-5 text-[16px] text-tr-fg2 leading-[1.65]\",\"children\":[[\"$\",\"li\",\"Sign in through Google or a one-time email code. Traack never stores passwords. Single sign-on through your identity provider is available for organisations.\",{\"children\":\"Sign in through Google or a one-time email code. Traack never stores passwords. Single sign-on through your identity provider is available for organisations.\"}],[\"$\",\"li\",\"Access to production systems by Traack staff requires hardware-backed multi-factor authentication and is limited to the people who operate the service.\",{\"children\":\"Access to production systems by Traack staff requires hardware-backed multi-factor authentication and is limited to the people who operate the service.\"}],[\"$\",\"li\",\"Every administrative action on your account, and every action the agent takes, is written to an audit log you can review and export.\",{\"children\":\"Every administrative action on your account, and every action the agent takes, is written to an audit log you can review and export.\"}]]}],null,null,null,null]}]\n9:[\"$\",\"section\",\"How the agent behaves\",{\"className\":\"flex flex-col gap-3\",\"children\":[[\"$\",\"h2\",null,{\"className\":\"font-semibold text-[22px] tracking-[-0.02em]\",\"children\":\"How the agent behaves\"}],[],[\"$\",\"ul\",null,{\"className\":\"flex list-disc flex-col gap-1.5 pl-5 text-[16px] text-tr-fg2 leading-[1.65]\",\"children\":[[\"$\",\"li\",\"The agent reads by default. Any action that would send, change or delete in a connected system stops and asks for your approval first, and the audit log records who agreed.\",{\"children\":\"The agent reads by default. Any action that would send, change or delete in a connected system stops and asks for your approval first, and the audit log records who agreed.\"}],[\"$\",\"li\",\"Every command the agent runs, every query it makes and every raw response it receives is recorded and replayable, so an external auditor can see exactly what was done, on which records and when.\",{\"children\":\"Every command the agent runs, every query it makes and every raw response it receives is recorded and replayable, so an external auditor can see exactly what was done, on which records and when.\"}],[\"$\",\"li\",\"Integrations use scoped OAuth grants. You can revoke any integration at any time from the app or from the source system.\",{\"children\":\"Integrations use scoped OAuth grants. You can revoke any integration at any time from the app or from the source system.\"}]]}],null,null,null,null]}]\na:[\"$\",\"section\",\"Data retention\",{\"className\":\"flex flex-col gap-3\",\"children\":[[\"$\",\"h2\",null,{\"className\":\"font-semibold text-[22px] tracking-[-0.02em]\",\"children\":\"Data retention\"}],[],[\"$\",\"ul\",null,{\"className\":\"flex list-disc flex-col gap-1.5 pl-5 text-[16px] text-tr-fg2 leading-[1.65]\",\"children\":[[\"$\",\"li\",\"Your evidence is processed for your engagement and nothing else. It is never used to train any model, ours or a third party's.\",{\"children\":\"Your evidence is processed for your engagement and nothing else. It is never used to train any model, ours or a third party's.\"}],[\"$\",\"li\",\"Model providers we use operate under zero data retention agreements. Prompts and responses are not stored by the provider after the request completes.\",{\"children\":\"Model providers we use operate under zero data retention agreements. Prompts and responses are not stored by the provider after the request completes.\"}],[\"$\",\"li\",\"You control retention. Files and threads are deleted when you delete them, and your whole workspace is deleted within 30 days of a written request or the end of your contract.\",{\"children\":\"You control retention. Files and threads are deleted when you delete them, and your whole workspace is deleted within 30 days of a written request or the end of your contract.\"}]]}],null,null,null,null]}]\nb:[\"$\",\"section\",\"Incident response\",{\"className\":\"flex flex-col gap-3\",\"children\":[[\"$\",\"h2\",null,{\"className\":\"font-semibold text-[22px] tracking-[-0.02em]\",\"children\":\"Incident response\"}],[[\"$\",\"p\",\"We monitor the service continuously and run an incident response process with defined severity levels. If an incident affects your data we will notify your account contact without undue delay, and in any case within 72 hours of confirming it, with what happened, what was affected and what we are doing about it.\",{\"className\":\"text-[16px] text-tr-fg2 leading-[1.65]\",\"children\":\"We monitor the service continuously and run an incident response process with defined severity levels. If an incident affects your data we will notify your account contact without undue delay, and in any case within 72 hours of confirming it, with what happened, what was affected and what we are doing about it.\"}]],null,null,null,null,null]}]\nc:[\"$\",\"section\",\"Reporting a vulnerability\",{\"className\":\"flex flex-col gap-3\",\"children\":[[\"$\",\"h2\",null,{\"className\":\"font-semibold text-[22px] tracking-[-0.02em]\",\"children\":\"Reporting a vulnerability\"}],[[\"$\",\"p\",\"If you believe you have found a vulnerability in Traack, email [email protected]. We acknowledge reports within two business days and will not take legal action against good-faith research that respects our customers' data. Please do not access data that is not yours and do not run automated scanners against production.\",{\"className\":\"text-[16px] text-tr-fg2 leading-[1.65]\",\"children\":\"If you believe you have found a vulnerability in Traack, email [email protected]. We acknowledge reports within two business days and will not take legal action against good-faith research that respects our customers' data. Please do not access data that is not yours and do not run automated scanners against production.\"}]],null,null,null,null,null]}]\nd:[\"$\",\"footer\",null,{\"className\":\"mx-auto flex w-full max-w-[1120px] flex-wrap items-center justify-between gap-4 px-6 py-8 text-[13px] text-tr-fg3\",\"children\":[[\"$\",\"span\",null,{\"className\":\"flex items-center gap-2\",\"children\":[[\"$\",\"svg\",null,{\"aria-hidden\":true,\"height\"
1:16,\"viewBox\":\"0 0 64 64\",\"width\":16,\"xmlns\":\"http://www.w3.org/2000/svg\",\"children\":[[\"$\",\"circle\",null,{\"cx\":\"32\",\"cy\":\"32\",\"fill\":\"none\",\"r\":\"29.6\",\"stroke\":\"#25293a\",\"strokeWidth\":\"3.2\"}],[\"$\",\"path\",null,{\"d\":\"M15.9 18H46.4V24.6H35.9V24.6H29.5L35.2 28.7V50.5H32.3L27 46.6V24.6H15.9Z\",\"fill\":\"#25293a\",\"stroke\":\"#25293a\",\"strokeLinejoin\":\"round\",\"strokeWidth\":\"1.6\"}],[\"$\",\"circle\",null,{\"cx\":\"41.2\",\"cy\":\"46.9\",\"fill\":\"#4f7fcf\",\"r\":\"3.2\"}]]}],\"© \",2026,\" Traack\"]}],[\"$\",\"div\",null,{\"className\":\"flex flex-wrap gap-x-14 gap-y-6\",\"children\":[[\"$\",\"div\",null,{\"className\":\"flex flex-col gap-2\",\"children\":[[\"$\",\"$L4\",null,{\"className\":\"hover:text-tr-fg\",\"href\":\"/security\",\"children\":\"Security\"}],[\"$\",\"$L4\",null,{\"className\":\"hover:text-tr-fg\",\"href\":\"/terms\",\"children\":\"Terms of service\"}],[\"$\",\"$L4\",null,{\"className\":\"hover:text-tr-fg\",\"href\":\"/privacy\",\"children\":\"Privacy policy\"}]]}],[\"$\",\"div\",null,{\"className\":\"flex flex-col gap-2\",\"children\":[[\"$\",\"$L4\",null,{\"className\":\"hover:text-tr-fg\",\"href\":\"/traack-vs-copilot\",\"children\":\"Traack vs Microsoft Copilot\"}],[\"$\",\"$L4\",null,{\"className\":\"hover:text-tr-fg\",\"href\":\"/traack-vs-chatgpt\",\"children\":\"Traack vs ChatGPT\"}]]}]]}]]}]\ne:[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/immutable/chunks/06mviu-q11quh.js\",\"async\":true,\"nonce\":\"$undefined\"}]\nf:[\"$\",\"$L14\",null,{\"children\":[\"$\",\"$15\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@16\"}]}]\n11:[\"$\",\"$1\",\"h\",{\"children\":[null,[\"$\",\"$L17\",null,{\"children\":\"$L18\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$L19\",null,{\"children\":[\"$\",\"$15\",null,{\"name\":\"Next.Metadata\",\"children\":\"$L1a\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}]\n13:[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/immutable/chunks/2k5vpzruj-klm.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}]\n10:C\n18:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n1b:I[76674,[\"/_next/static/immutable/chunks/0xtru6rvce1rm.js\"],\"IconMark\"]\n16:null\n1a:[[\"$\",\"title\",\"0\",{\"children\":\"Security â Traack\"}],[\"$\",\"meta\",\"1\",{\"name\":\"description\",\"content\":\"We build custom AI workflows that do the busy work of internal auditing and SOX compliance evidence gathering. Zero data retention and SOC 2 compliant.\"}],[\"$\",\"meta\",\"2\",{\"property\":\"og:title\",\"content\":\"Traack â AI agents for internal audit and SOX compliance teams\"}],[\"$\",\"meta\",\"3\",{\"property\":\"og:description\",\"content\":\"Custom AI workflows that do the busy work of internal auditing and SOX compliance evidence gathering.\"}],[\"$\",\"meta\",\"4\",{\"property\":\"og:type\",\"content\":\"website\"}],[\"$\",\"meta\",\"5\",{\"name\":\"twitter:card\",\"content\":\"summary\"}],[\"$\",\"meta\",\"6\",{\"name\":\"twitter:title\",\"content\":\"Traack â AI agents for internal audit and SOX compliance teams\"}],[\"$\",\"meta\",\"7\",{\"name\":\"twitter:description\",\"content\":\"Custom AI workflows that do the busy work of internal auditing and SOX compliance evidence gathering.\"}],[\"$\",\"link\",\"8\",{\"rel\":\"icon\",\"href\":\"/icon.svg?icon.0dk1pt81a6_5w.svg\",\"sizes\":\"any\",\"type\":\"image/svg+xml\"}],[\"$\",\"link\",\"9\",{\"rel\":\"apple-touch-icon\",\"href\":\"/apple-icon.png?apple-icon.3xf1gsln7cx42.png\",\"sizes\":\"180x180\",\"type\":\"image/png\"}],[\"$\",\"$L1b\",\"10\",{}]]\n"])</script>
1</body></html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.