30 Days Gen AI Risk Trial -Start Now
Skip to main content

Aona Trust

Security you can verify.

Secure AI adoption starts with confidence in your security partner. Explore our independent audit, data controls and deployment options.

Visit our Trust CenterExplore our approach

Independent audit

Confidence, backed by evidence.

Aona has completed a SOC 2 Type II examination covering Security, Confidentiality and Availability. Request the report to review the auditor’s findings and the full system scope.

Request the report
Report issued
Audit period
Independent auditor
Securance Pro Assurance PLLC

Trust Services Criteria

Security

Controls that protect information and systems against unauthorised access.

Confidentiality

Controls that protect information designated as confidential.

Availability

Controls that support system operation and availability.

Available on request through our Trust Center.

Data & deployment

Your infrastructure. Your control.

Choose where Aona is hosted and where it processes prompts. Two decisions, shaped around your organisation’s requirements.

Explore deployment options

Where does Aona run?

Run the Aona backend in your own environment or use Aona-managed hosting.

Your cloud
On-premises
Aona-managed

Our team helps you choose a supported configuration. Third-party AI providers have their own data-processing arrangements.

Your questions, answered

A clearer security review.

How can I access Aona’s SOC 2 report?

Request access through the Aona Trust Center. The SOC 2 Type II report is shared on request and includes the auditor’s findings, system description and audit scope.

What does the SOC 2 Type II report cover?

The report covers Security, Confidentiality and Availability for the observation period from 23 October 2025 to 23 January 2026. Securance Pro Assurance PLLC issued it on 17 March 2026. Review the report for the systems and controls included in the examination.

Can Aona run in our own environment?

Yes. The Aona backend can be hosted in your cloud, on-premises or on Aona-managed servers. Our team can help you select a supported configuration for the features and integrations you need.

Can prompts be processed on the employee’s machine?

Yes. Aona offers prompt processing on the employee’s device, in your cloud or on-premises, or on Aona-managed servers. Prompt processing and backend hosting are separate choices. Your configuration determines which features and integrations are supported; third-party AI providers have their own processing arrangements.

Who can help with our security review?

Use the Trust Center to request security documentation, or book a conversation with our team about data handling, deployment and protection for your organisation’s AI use.

Let’s talk about your security requirements.

Speak with our team about protecting AI use, deployment and the evidence your organisation needs.

Talk to our team