Security and compliance for insurance AI

Solva keeps your client data safe with world-class security, privacy, and compliance, purpose-built for the insurance industry.

Go to Trust Center

HIPAA

Solva meets all requirements for a Business Associate under HIPAA. We offer a comprehensive BAA, support PHI processing with end-to-end encryption, and maintain strict access controls to protect sensitive healthcare data.

ISO 27001

Solva is fully certified with ISO 27001, the internationally recognized standard for information security management.

GDPR

Designed for European compliance. We offer EU-native data hosting with strict data residency controls. Our legal framework includes comprehensive DPAs and Transfer Impact Assessments (TIA) to ensure full GDPR alignment.

SOC 2 Type 2

Robust security and compliance controls are actively operating and currently under evaluation as part of the SOC 2 observation period.

Trusted data handling

Insurance-grade data isolation

Every customer's data is logically isolated. Claims data, policy documents, and PHI are processed in dedicated environments with strict access boundaries.

EU-based and US-based infrastructure

Solva runs on infrastructure that you already trust. Our dynamic enterprise grade platform can seamlessly be provisioned to Microsoft Azure, Google Cloud Platform or AWS

No model training on your data

Your confidential claims data remains secure and private. Solva will never use your data to train or fine-tune any AI models.

Enterprise-grade security

Granular permissions & SSO

Secure authentication with Single Sign-On (SSO), role-based access controls (RBAC), and detailed audit logs. Control exactly who sees what, down to individual claim level.

Your approval required

Access to customer data is strictly controlled and only granted to Solva engineers with written customer approval for support-related issues.

Regular penetration testing

Solva undergoes regular third-party penetration tests covering the full platform scope. Results and remediation reports are available to customers upon request.

Encryption at rest and in transit

All data is encrypted in transit using TLS 1.2 or higher, and at rest with AES-256 encryption. For customers requiring additional control, we support customer-managed encryption keys (BYOK).

Data retention

Set and manage data retention periods to align with your policies and regulatory requirements.

Data export

Request a full export of your data at any time and permanently delete platform data on demand.

Encryption management

Manage your own encryption keys with our BYOK option to keep sensitive data protected.

User authentication

SSO integration gives you complete control over user authentication and access management.

How does Solva encrypt data?

At Solva, protecting your data is our top priority. All data is encrypted in transit using TLS 1.2 or higher, and at rest with AES-256 encryption. For customers requiring additional control, we also offer the option to encrypt data with their own encryption keys.

How does Solva handle customer data?

Our customers entrust us with some of their most sensitive information, a responsibility we take extremely seriously. Data is processed in isolated environments (single tenant), accessible only to your authorized users. Solva will never access your data without your explicit written consent.

How does Solva handle AI transparency and explainability?

Transparency is core to how we build AI. Every AI output generated in Solva can be traced back to the source data and prompt that produced it. This means you can always review the AI's reasoning, examine the sources it relied on, and verify its conclusions.

What happens to our data when we stop using Solva?

If your contract ends, all of your data, along with any dedicated storage resources associated with your account, is permanently deleted. Before this happens, you'll have the opportunity to request a full export of your data to ensure you retain everything you need.

Can Solva be deployed on-premise or in our own cloud?

Yes. Solva supports self-hosted deployments for customers with strict data residency or security requirements. Contact us for details.

Does Solva train AI models on our data?

No. Your data is strictly off limits for AI model training. When explicitly requested, Solva can provide custom AI training completely isolated to your environment.

Schedule A Demo