Security and trust

How we protect deal information

Deal information is among the most sensitive a company holds. Here is how Zeus AI keeps it need-to-know.

Restricted deals do not exist for people without access. They do not appear in lists, counts or search.

Where AI is used, it proposes and people decide. Your administrators control it.

Every customer's data is kept apart from every other customer's, on every request.

Controls

Security controls
Control	How it works
Access restrictions per deal	Enforced by the application; hidden records return 'not found'.
Single sign-on (OpenID Connect and SAML 2.0)	A local administrator is always kept so an outage cannot lock you out.
User provisioning (SCIM)	Provision and deprovision from your identity provider.
Optional two-step sign-in	Authenticator-app codes with recovery codes.
Tamper-evident audit log	Events are chained so edits can be detected.
Guest portal for outside parties	Separate address, separate sign-in, folder-level permissions.
Uploaded-file scanning	Files are scanned before they can be opened.
Content Security Policy	A strict policy on every page blocks injected scripts, embedded content and framing of the site.
HTTPS only	Every page is served over HTTPS, with strict transport security so browsers do not fall back to plain http.
Insider lists and read logs	Record who knew about a deal, and who opened it.
Regular access reviews	Review who still needs access, and end access that is no longer needed.

Tell us about your team and we will show you a realistic scenario.