Security
Government-grade security for government contractors
Enterprise-grade security controls to protect your proposals, documents, and sensitive data.
GovCloud option
Available in a separate government environment in AWS GovCloud (US) for organizations requiring full environment isolation.
No training
You maintain full control of your data at all times. We never train our models on your proprietary information.
Encrypted data
We secure your data with encryption both in transit and at rest, using proven industry-standard protocols.
Hardened infrastructure
CLEATUS runs on managed cloud infrastructure with network isolation and least-privilege access for our own personnel.
Defense-grade
infrastructure options
Hardened cloud infrastructure with encryption, continuous monitoring, and an AWS GovCloud environment for sensitive government workloads.
Security Controls
How We Protect Your Data
AES-256 Encryption
All data is encrypted at rest and in transit using AES-256 — the same standard used by the U.S. government to protect classified information.
No AI Training on Your Data
You maintain full ownership and control of your data at all times. We never use your proprietary information to train AI models.
Granular Access Control
Configurable role-based permissions with restricted user options let you control exactly who can see, edit, and manage sensitive content.
Comprehensive Audit Logs
Every action is tracked with detailed audit logs. Filter by date, user, action type, and resource — and export to CSV for compliance reporting.
Hardened Cloud Infrastructure
Your data runs on managed cloud infrastructure with encryption at rest and in transit, network isolation, and least-privilege access for our own personnel.
Monitoring & Alerting
Continuous health checks, centralized logging, and real-time alerting ensure rapid detection and response to any operational or security issues.
750+
Government Contractors
$5B+
In Contracts Won
AES-256
Encryption Standard
TLS 1.2+
Data in Transit
Privacy Locked in.
Enterprise-grade encryption protects your data in transit and at rest.
Built with security at its core, so your proposals, pipeline, and agent conversations stay yours.
Compliance
Built for Compliance
Designed from the ground up to meet the security and compliance needs of government contractors and their IT teams.
GovCloud Deployment
ActiveAvailable in a separate government environment in AWS GovCloud (US) — architecturally isolated from the commercial platform, with in-boundary model inference for controlled workloads.
Vendor Security
ActiveWe rigorously vet all third-party vendors and enforce strict security requirements across our supply chain.
Incident Response
ActiveA documented incident response plan ensures rapid detection, containment, and resolution of any security event.
Data Retention
ActiveYour data is retained only while your account is active. Upon cancellation, all data is permanently deleted within 30 days.
Penetration Testing
ActiveRegular third-party security assessments identify and address vulnerabilities before they can be exploited.
Public Status Page
ActiveReal-time system availability, incident history, and scheduled maintenance are published openly at status.cleat.ai.
View system status →
Data Privacy
Your Data Stays Yours
We believe your competitive intelligence belongs to you. CLEATUS never trains AI models on your proprietary data, and your proposals, documents, and company information are used exclusively to serve your account.
Frequently Asked Questions
Vulnerability disclosure policy
Report suspected security vulnerabilities in CLEATUS services to security@cleat.ai.
Include the affected address, reproduction steps, and the potential impact. Use a test account you control. Remove credentials and customer data from your report.
Do not access another user's data, disrupt services, or change data without authorization. If you encounter sensitive data, stop testing and report the affected location without copying the data.
Send the report privately so CLEATUS can investigate before public disclosure.