Enterprise Security and Compliance
Predictive AI supported by comprehensive security controls
Pecan combines infrastructure protection, access management, encryption, and continuous monitoring to safeguard customer data throughout the predictive analytics lifecycle.
Independent Assurance
Pecan maintains ISO 27001 certification and undergoes annual independent SOC 2 Type II assessments to evaluate its control environment.
ISO 27001
Pecan is certified under ISO 27001, a globally recognized standard for managing Information Security Management Systems. Its main goal is to identify and mitigate risks to the confidentiality, integrity, and availability of the data and information held within a company.
SOC2 Type II
Pecan undergoes an annual independent assessment of our cloud controls environment. This independent auditing is rigorous and takes place over an extended period of up to 12 months. The process scrutinizes Pecan’s internal controls and systems related to security, availability, processing integrity, confidentiality, and privacy of data.
Identity and Access Management
Customers can integrate their own single sign-on (SSO) provider and enforce two-factor authentication to align platform access with organizational security policies. Internal access to customer data is restricted to designated personnel on a need-to-know basis.
Data Protection and Lifecycle Management
Pecan encrypts data at rest and in transit. Customers have fine-grained control over the data Pecan can access. Data is used and retained solely for the purpose of providing predictions. Customer data is not used to train Pecan’s models or other customers’ models. Customers can bring their own data buckets, granting Pecan only the minimum read and write permissions required.
Monitoring and Incident Response
Centralized logging captures user activity, data connections, and system operations. Continuous security monitoring and SIEM controls support threat detection, investigation, and response.
