1import"../chunks/DsnmJJEf.js";import"../chunks/CK3AoaC7.js";import{p as ds,d as Ts,e as ps,a as C,b as cs,n as Ds,g as o,t as Ms,c as s,R as l,s as t,f as ms,r as e,at as a}from"../chunks/CYGRAPIB.js";import{s as r}from"../chunks/D9UuDnCi.js";import{i as Es}from"../chunks/BA65WU6K.js";import"../chunks/BEZvtooX.js";import{B as qs,b as Ls}from"../chunks/CpWhE398.js";import{b as Qs}from"../chunks/Bq6mx6dM.js";import{l as Bs,a as Hs,s as Ns,b as Gs,c as js,d as Fs,e as Us,f as Ys,g as Ws,h as zs,i as Js,j as Ks,k as Vs,m as Xs,n as Zs}from"../chunks/Dr9iPmTF.js";import{S as se}from"../chunks/D0T9t0sD.js";import{P as ee}from"../chunks/CtgGnEb9.js";import{L as te}from"../chunks/DbOubVS_.js";import{S as I}from"../chunks/Dpe20BOx.js";import{L as ae}from"../chunks/AuZ6WHz6.js";import{S as re}from"../chunks/DblsQZga.js";import{E as ie}from"../chunks/DlE0pPML.js";import{T as ne}from"../chunks/Dqm9ER7N.js";import{U as oe}from"../chunks/DHEvzz0p.js";import{s as le}from"../chunks/B1WxC4rU.js";import{s as de,r as pe}from"../chunks/nU4rHKDQ.js";import{I as ce}from"../chunks/i-MEGDDQ.js";function me(g,n){ds(n,!0);let d=pe(n,["$$slots","$$events","$$legacy"]);const p=[["path",{d:"M2.586 17.414A2 2 0 0 0 2 18.828V21a1 1 0 0 0 1 1h3a1 1 0 0 0 1-1v-1a1 1 0 0 1 1-1h1a1 1 0 0 0 1-1v-1a1 1 0 0 1 1-1h.172a2 2 0 0 0 1.414-.586l.814-.814a6.5 6.5 0 1 0-4-4z"}],["circle",{cx:"16.5",cy:"7.5",r:".5",fill:"currentColor"}]];ce(g,de({name:"key-round"},()=>d,{get iconNode(){return p},children:(c,R)=>{var i=Ts(),m=ps(i);le(m,()=>n.children??Ds),C(c,i)},$$slots:{default:!0}})),cs()}const ge=!0,Le=Object.freeze(Object.defineProperty({__proto__:null,prerender:ge},Symbol.toStringTag,{value:"Module"}));var ue=ms(`<div class="container mx-auto px-6 py-16"><div class="max-w-4xl mx-auto"><!> <div class="space-y-8"><div class="bg-card border border-border rounded-lg overflow-hidden"><div class="p-6 border-b border-border"><h2 class="flex items-center gap-3 text-foreground font-semibold text-lg"><!> </h2></div> <div class="p-6 text-muted-foreground space-y-4"><p class="text-sm">Yanok AI implements a defense-in-depth security strategy with multiple layers of 2 protection across our infrastructure, applications, and processes. Our security 3 program is designed to protect the confidentiality, integrity, and availability of 4 customer data.</p> <div class="grid md:grid-cols-3 gap-4 mt-4"><div class="bg-muted/30 p-4 rounded-lg"><p class="font-semibold text-foreground text-lg">SOC 2 Type II</p> <p class="text-sm">Annual audit in progress</p></div> <div class="bg-muted/30 p-4 rounded-lg"><p class="font-semibold text-foreground text-lg">ISO 27001</p> <p class="text-sm">Certification target Q3 2026</p></div> <div class="bg-muted/30 p-4 rounded-lg"><p class="font-semibold text-foreground text-lg">GDPR Compliant</p> <p class="text-sm">EU data protection standards</p></div></div></div></div> <div class="bg-card border border-border rounded-lg overflow-hidden"><div class="p-6 border-b border-border"><h2 class="flex items-center gap-3 text-foreground font-semibold text-lg"><!> </h2></div> <div class="p-6 text-muted-foreground space-y-6"><div><h3 class="text-base font-medium text-foreground mb-2">Encryption</h3> <ul class="space-y-2 text-sm"><li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>In Transit:</strong> TLS 1.3 encryption for all data transmission with perfect 5 forward secrecy</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>At Rest:</strong> AES-256 encryption for all stored data, including databases 6 and file storage</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Key Management:</strong> Hardware Security Modules (HSM) for encryption key 7 storage and rotation</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>End-to-End:</strong> Optional E2E encryption for sensitive workflow data</span></li></ul></div> <div><h3 class="text-base font-medium text-foreground mb-2">Access Controls</h3> <ul class="space-y-2 text-sm"><li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Role-Based Access Control (RBAC):</strong> Granular permissions based on 8 job function</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Multi-Factor Authentication (MFA):</strong> Required for all administrative 9 access</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Principle of Least Privilege:</strong> Users have minimum necessary permissions</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Session Management:</strong> Automatic timeout after 30 minutes of inactivity</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>IP Allowlisting:</strong> Available for enterprise customers</span></li></ul></div> <div><h3 class="text-base font-medium text-foreground mb-2">Data Isolation</h3> <ul class="space-y-2 text-sm"><li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Multi-Tenancy:</strong> Logical data separation with row-level security</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Private Deployments:</strong> Dedicated instances available for enterprise</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Network Segmentation:</strong> Production, staging, and development environments 10 isolated</span></li></ul></div></div></div> <div class="bg-card border border-border rounded-lg overflow-hidden"><div class="p-6 border-b border-border"><h2 class="flex items-center gap-3 text-foreground font-semibold text-lg"><!> </h2></div> <div class="p-6 text-muted-foreground space-y-4"><div><h3 class="text-base font-medium text-foreground mb-2">
10Cloud Infrastructure</h3> <p class="text-sm mb-3">Yanok AI infrastructure is hosted on AWS (primary) and Google Cloud Platform 11 (backup), both certified under ISO 27001, SOC 2, and other international security 12 standards.</p> <ul class="space-y-2 text-sm"><li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Geographic Redundancy:</strong> Multi-region deployment for high availability</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>DDoS Protection:</strong> Cloudflare enterprise protection and rate limiting</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Firewall:</strong> Web Application Firewall (WAF) with custom rule sets</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Intrusion Detection:</strong> Real-time monitoring and automated response</span></li></ul></div> <div><h3 class="text-base font-medium text-foreground mb-2">Secure Development</h3> <ul class="space-y-2 text-sm"><li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Code Review:</strong> All code changes require peer review before deployment</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Static Analysis:</strong> Automated security scanning (Snyk, SonarQube)</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Dependency Management:</strong> Regular updates and vulnerability scanning</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Penetration Testing:</strong> Quarterly third-party security assessments</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Bug Bounty:</strong> Responsible disclosure program with HackerOne</span></li></ul></div></div></div> <div class="bg-card border border-border rounded-lg overflow-hidden"><div class="p-6 border-b border-border"><h2 class="flex items-center gap-3 text-foreground font-semibold text-lg"><!> </h2></div> <div class="p-6 text-muted-foreground space-y-3"><ul class="space-y-3 text-sm"><li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>24/7 Security Operations:</strong> Continuous monitoring by security team and 13 automated systems</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>SIEM Integration:</strong> Centralized logging and security event correlation</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Anomaly Detection:</strong> Machine learning-based threat detection</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Audit Logging:</strong> Comprehensive logging of all access and changes</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Retention:</strong> Security logs retained for 13 months</span></li></ul></div></div> <div class="bg-card border border-border rounded-lg overflow-hidden"><div class="p-6 border-b border-border"><h2 class="flex items-center gap-3 text-foreground font-semibold text-lg"><!> </h2></div> <div class="p-6 text-muted-foreground space-y-4"><p class="text-sm">Yanok AI maintains a formal incident response plan aligned with NIST SP 800-61 14 guidelines. Our response process includes preparation, detection, containment, 15 eradication, recovery, and post-incident analysis.</p> <div class="bg-muted/30 p-6 rounded-lg space-y-4"><h3 class="text-base font-medium text-foreground">Incident Classification Levels</h3> <div class="space-y-3"><div class="flex items-start gap-3"><div class="w-3 h-3 bg-destructive rounded-full mt-1.5 shrink-0"></div> <div><p class="font-medium text-foreground">Critical (P1)</p> <p class="text-sm">Data breach, complete service outage, or security compromise affecting 16 multiple customers</p> <p class="text-sm font-medium text-destructive">Response Time: 15 minutes</p></div></div> <div class="flex items-start gap-3"><div class="w-3 h-3 bg-[hsl(var(--yanok-orange))] rounded-full mt-1.5 shrink-0"></div> <div><p class="font-medium text-foreground">High (P2)</p> <p class="text-sm">Potential security vulnerability or significant service degradation</p> <p class="text-sm font-medium text-[hsl(var(--yanok-orange))]">Response Time: 1 hour</p></div></div> <div class="flex items-start gap-3"><div class="w-3 h-3 bg-[hsl(var(--a11y-warning))] rounded-full mt-1.5 shrink-0"></div> <div><p class="font-medium text-foreground">Medium (P3)</p> <p class="text-sm">Minor security concern or isolated service issues</p> <p class="text-sm font-medium text-[hsl(var(--a11y-warning))]">Response Time: 4 hours</p></div></div> <div class="flex items-start gap-3"><div class="w-3 h-3 bg-[hsl(var(--a11y-info))] rounded-full mt-1.5 shrink-0"></div> <div><p class="font-medium text-foreground">Low (P4)</p> <p class="text-sm">Information request or routine security maintenance</p> <p class="text-sm font-medium text-[hsl(var(--a11y-info))]">Response Time: 24 hours</p></div></div></div></div> <div><h3 class="text-base font-medium text-foreground mb-3">Customer Notification</h3> <p class="text-sm mb-3">In the event of a security incident that affects customer data, Yanok AI commits to:</p> <ul class="space-y-2 text-sm"><li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span>Notify affected customers within 72 hours of confirmed breach (as required by 17 GDPR)</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span>Provide detailed information about the nature and scope of the incident</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span>Outline steps taken to contain and remediate the incident</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span>Recommend actions customers should take to protect their data</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span>Provide regular updates until the incident is fully resolved</span></li></ul></div></div></div> <div class="bg-card border border-border rounded-lg overflow-hidden"><div class="p-6 border-b border-border"><h2 class="flex items-center gap-3 text-foreground font-semibold text-lg"><!> </h2></div> <div class="p-6 text-muted-foreground space-y-3"><ul class="space-y-3 text-sm"><li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>
17Background Checks:</strong> All employees undergo background screening appropriate 18 to their role</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Security Training:</strong> Mandatory annual security awareness training for 19 all staff</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Confidentiality Agreements:</strong> All personnel sign NDAs covering customer 20 data</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Access Review:</strong> Quarterly review of employee access permissions</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Offboarding:</strong> Immediate revocation of access upon termination</span></li></ul></div></div> <div class="bg-card border border-border rounded-lg overflow-hidden"><div class="p-6 border-b border-border"><h2 class="flex items-center gap-3 text-foreground font-semibold text-lg"><!> </h2></div> <div class="p-6 text-muted-foreground space-y-4"><div class="grid md:grid-cols-2 gap-4"><div class="space-y-2"><h3 class="font-medium text-foreground">Current Compliance</h3> <ul class="text-sm space-y-1"><li>â GDPR (EU General Data Protection Regulation)</li> <li>â PDPA (Singapore Personal Data Protection Act)</li> <li>â CCPA/CPRA (California Consumer Privacy Act)</li> <li>â HIPAA (Healthcare Insurance Portability and Accountability Act)</li></ul></div> <div class="space-y-2"><h3 class="font-medium text-foreground">Certifications In Progress</h3> <ul class="text-sm space-y-1"><li>â³ SOC 2 Type II (Q2 2026)</li> <li>â³ ISO 27001:2022 (Q3 2026)</li> <li>â³ ISO 27701 (Privacy) (Q4 2026)</li> <li>â³ PCI-DSS Level 1 (Q4 2026)</li></ul></div></div></div></div> <div class="bg-card border border-border rounded-lg overflow-hidden"><div class="p-6 border-b border-border"><h2 class="flex items-center gap-3 text-foreground font-semibold text-lg"> </h2></div> <div class="p-6 text-muted-foreground space-y-4"><p class="text-sm">Yanok AI maintains comprehensive business continuity and disaster recovery plans to 21 ensure service availability:</p> <ul class="space-y-2 text-sm"><li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Backup Strategy:</strong> Continuous replication with point-in-time recovery</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Recovery Time Objective (RTO):</strong> 4 hours for critical systems</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Recovery Point Objective (RPO):</strong> 15 minutes maximum data loss</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>DR Testing:</strong> Quarterly disaster recovery drills</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span><strong>Failover:</strong> Automated failover to secondary region</span></li></ul></div></div> <div class="bg-card border border-border rounded-lg overflow-hidden"><div class="p-6 border-b border-border"><h2 class="flex items-center gap-3 text-foreground font-semibold text-lg"> </h2></div> <div class="p-6 text-muted-foreground space-y-4"><p class="text-sm">Yanok AI operates a responsible disclosure program. If you discover a security 22 vulnerability, please report it to our security team:</p> <div class="bg-muted/30 p-6 rounded-lg space-y-3"><div class="flex items-start gap-3"><!> <div><p class="font-medium text-foreground">Security Team</p> <a href="mailto:[email protected]" class="text-primary hover:text-primary/80">[email protected]</a></div></div> <p class="text-sm">We request that you do not publicly disclose vulnerabilities until we have had an 23 opportunity to investigate and address them. We commit to acknowledging reports 24 within 24 hours and providing regular updates on remediation progress.</p></div></div></div> <div class="bg-card border border-border rounded-lg overflow-hidden"><div class="p-6 border-b border-border"><h2 class="flex items-center gap-3 text-foreground font-semibold text-lg"> </h2></div> <div class="p-6 text-muted-foreground space-y-4"><p class="text-sm mb-4">Enterprise customers can request additional security documentation:</p> <ul class="space-y-2 text-sm"><li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span>SOC 2 Type II report (under NDA)</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span>Penetration test results summary</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span>Security questionnaire responses</span></li> <li class="flex items-start gap-2"><span class="text-primary mt-1">â¢</span><span>Custom security assessments</span></li></ul> <p class="text-sm mt-4">Contact <a href="mailto:[email protected]" class="text-primary hover:text-primary/80">[email protected]</a> to request documentation.</p></div></div> <div class="bg-muted/30 border border-border rounded-lg p-6"><p class="text-sm text-muted-foreground">This security policy is reviewed and updated quarterly or more frequently as needed to 25 reflect changes in our security posture, technology, and regulatory requirements. Last 26 updated: January 15, 2026.</p></div></div></div></div>`),ve=ms("<!> <!> <!>",1);function Qe(g,n){ds(n,!1),Es();var d=ve(),p=ps(d);{let i=l(()=>Ns()),m=l(()=>Gs());se(p,{get title(){return o(i)},get description(){return o(m)},ogImage:"https://www.yanok.ai/images/og/legal.png",keywords:"security policy, enterprise security, data protection, incident response",canonicalPath:"/legal/security-policy"})}var c=t(p,2);{let i=l(()=>[{name:Ls(),url:"https://www.yanok.ai/"},{name:Qs(),url:"https://www.yanok.ai/legal"},{name:js(),url:"https://www.yanok.ai/legal/security-policy"}]);qs(c,{get items(){return o(i)}})}var R=t(c,2);ee(R,{children:(i,m)=>{var u=ue(),$=s(u),O=s($);{let S=l(()=>Bs()),k=l(()=>Hs());te(O,{get icon(){return I},get title(){return o(S)},get subtitle(){return o(k)},lastUpdated:"January 15, 2026"})}var T=t(O,2),v=s(T),D=s(v),M=s(D),E=s(M);I(E,{class:"w-5 h-5 text-primary"});var gs=t(E);e(M),e(D),a(2),e(v);var f=t(v,2),q=s(f),L=s(q),Q=s(L);ae(Q,{class:"w-5 h-5 text-primary"});var us=t(Q);e(L),e(q),a(2),e(f);var y=t(f,2),B=s(y),H=s(B),N=s(H);re(N,{class:"w-5 h-5 text-primary"});var vs=t(N);e(H),e(B),a(2),e(y);var x=t(y,2),G=s(x),j=s(G),F=s(j);ie(F,{class:"w-5 h-5 text-primary"});var fs=t(F);e(j),e(G),a(2),e(x);var b=t(x,2),U=s(b),Y=s(U),W=s(Y);ne(W,{class:"w-5 h-5 text-[hsl(var(--a11y-warning))]"});var ys=t(W);e(Y),e(U),a(2),e(b);var h=t(b,2),z=s(h),J=s(z),K=s(J);oe(K,{class:"w-5 h-5 text-primary"});var xs=t(K);e(J),e(z),a(2),e(h);var _=t(h,2),V=s(_),X=s(V),Z=s(X);me(Z,{class:"w-5 h-5 text-primary"});var bs=t(Z);e(X),e(V),a(2),e(_);var w=t(_,2),ss=s(w),es=s(ss),hs=s(es,!0);e(es),e(ss),a(2),e(w);var A=t(w,2),P=s(A),ts=s(P),_s=s(ts,!0);e(ts),e(P);var as=t(P,2),rs=t(s(as),2),is=s(rs),ws=s(is);I(ws,{class:"w-5 h-5 text-primary mt-0.5"}),a(2),e(is),a(2),e(rs),e(as),e(A);var ns=t(A,2),os=s(ns),ls=s(os),As=s(ls,!0);e(ls),e(os),a(2),e(ns),a(2),e(T),e($),e(u),Ms((S,k,Ps,Ss,ks,Is,Cs,Rs,$s,Os)=>{r(gs,` ${S??""}`),r(us,` ${k??""}`),r(vs,` ${Ps??""}`),r(fs,` ${Ss??""}`),r(ys,` ${ks??""}`),r(xs,` ${Is??""}`),r(bs,` ${Cs??""}`),r(hs,Rs),r(_s,$s),r(As,Os)},[()=>Fs(),()=>Us(),()=>Ys(),()=>Ws(),()=>zs(),()=>Js(),()=>Ks(),()=>Vs(),()=>Xs(),()=>Zs()]),C(i,u)},$$slots:{default:!0}}),C(g,d),cs()}export{Qe as component,Le as universal};
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.