Yes. Cyrus is SOC 2 Type I compliant, ensuring that our security controls and processes meet industry standards for protecting customer data. We implement robust security practices including webhook signature verification, OAuth 2.0 authentication, encrypted data transmission, and granular permission controls. Additionally, Cyrus leverages Anthropic's enterprise-grade infrastructure, which is SOC 2 Type II, HIPAA, and ISO 27001 certified. Our open-source nature allows your security team to audit the codebase, and you can deploy Cyrus in your own secure environment for complete control.