Platform · Security
How we protect government data.
Agencies trust Hazel with sensitive procurement information. That trust is earned through controls, not claims. Here's how we operate.
Your data stays yours
Customer data is never used to train models shared with other customers. Hazel has zero data retention agreements with all third-party vendors. Agency documents, templates, and records are logically separated per customer, and access inside an agency respects your own permission structures. Data isn't shared even between departments unless you choose to share it.
Compliance
Hazel is aligned to NIST 800-53 (Low baseline).
SOC 2 Type II Certified
Built only in the United States
Hazel's infrastructure runs in the United States, and Hazel is built entirely by U.S.-based personnel.
Responsible disclosure
Found a vulnerability? Email security@hazelai.com. We respond to every report.
Questions about security review or ATO support? Request a Demo