Is ClearGuide AI SOC 2, HIPAA, or ISO certified?

Not at this time. ClearGuide is an AI consulting and implementation firm, not a SaaS platform hosting all client data. We help clients evaluate platform-level compliance, configure systems responsibly, and design workflows with appropriate data boundaries and human review.

Security & Trust

Practical AI systems built with security, privacy, and human oversight in mind.

ClearGuide works on sensitive operational workflows: documents, inboxes, finance processes, customer intake, and internal handoffs. Trust is not an add-on after the build. It shapes how we choose tools, scope access, map data movement, and keep people in control.

Talk through your workflow ->

Workflow guardrails

Designed around access, data movement, and review.

Trust is stronger when the workflow is mapped before the tool is chosen.

Workflow mapping first

Least-necessary access

Human review points

Vendor-neutral evaluation

Trust principles

Security starts with how the workflow is designed.

ClearGuide is not trying to automate everything. The goal is to make work clearer, faster, and more controlled, especially when sensitive business information is involved.

Least-necessary access

We scope access around the workflow being improved and avoid requesting broad system access when a narrower path will do.

Human review built in

AI can help extract, summarize, draft, classify, and route work, but important decisions should keep the right people in the loop.

Vendor-neutral judgment

We evaluate tools based on workflow fit, data sensitivity, controls, cost, and maintainability instead of forcing one preferred platform.

Platform trust signals

Trusted platforms, carefully configured.

ClearGuide works with established AI, automation, database, and workflow platforms that publish security and compliance documentation. Platform compliance does not replace good implementation design, but it gives us stronger building blocks when sensitive business data is involved.

OpenAI

Vendor-reported trust signals include SOC 2 Type 2 and ISO 27001/27017/27018/27701 for covered business services, with DPA and BAA options for eligible use cases.

SOC 2 Type 2

ISO 27001

BAA option

OpenAI Trust ->

Anthropic

Vendor-reported trust signals include SOC 2 Type I & Type II, ISO 27001:2022, ISO/IEC 42001:2023, and HIPAA-ready configuration with BAA available for commercial products.

SOC 2 I & II

ISO 27001

ISO 42001

Anthropic certifications ->

Quickbase

Vendor-reported trust signals include SOC1 Type II, SOC2 Type II, SOC3, HIPAA Security Rule attestation, DFARS/NIST 800-171, and CSA STAR Level 2.

SOC 1/2/3

HIPAA Security Rule

CSA STAR L2

Quickbase compliance ->

Make

Vendor-reported trust signals include SOC 2 Type II, SOC 3, GDPR adherence, ISO 27001-certified information security program, and enterprise isolation options.

SOC 2 Type II

SOC 3

ISO 27001

Make security ->

Supabase

Vendor-reported trust signals include SOC 2 Type 2, ISO 27001, HIPAA support with BAA/shared responsibility model, and encryption at rest and in transit.

SOC 2 Type 2

ISO 27001

HIPAA support

Supabase security ->

Vercel

Vendor-reported trust signals include SOC 2 Type 2, ISO 27001:2022, GDPR support, PCI DSS, and HIPAA support with BAA options for eligible Pro and Enterprise use cases.

SOC 2 Type 2

ISO 27001

HIPAA support

Vercel security ->

Compliance depends on the specific product plan, configuration, data type, contract terms, and customer responsibilities. ClearGuide helps clients evaluate those requirements before sensitive workflows are automated.

Shared responsibility

Trust depends on the whole system, not one vendor badge.

A secure AI workflow depends on ClearGuide’s implementation choices, the client’s account and access practices, and the controls of the underlying platforms.

ClearGuide

Maps the workflow, recommends appropriate tools, documents data movement, scopes access, and designs review points.

Client team

Owns accounts, approves access, confirms requirements, reviews sensitive outputs, and maintains internal policies.

Platform vendors

Provide the security controls, compliance documentation, infrastructure, product settings, and contractual terms for their services.

Before we build

The right questions come before the automation.

Before sensitive work is automated, ClearGuide helps clarify the practical security and governance questions that shape the build.

Data

What data is involved, and which parts are sensitive?

Systems

Which systems will connect, and where will data move?

Access

Who needs access, and what can be limited or removed?

Review

Where should human review, approval, or exception handling stay in place?

Documentation

What logs, documentation, or handoff materials will the team need?

Requirements

Which vendor terms, retention settings, BAA/DPA needs, or compliance requirements apply?

AI should support judgment, not quietly replace it.

ClearGuide does not position AI as a replacement for legal, accounting, compliance, medical, or management approval. AI systems should support routing, extraction, drafting, summarization, and recommendations, with humans kept in control where judgment matters.

AI governance

ClearGuide is not a compliance auditor.

We can help design safer workflows and evaluate vendor fit, but legal, regulatory, cybersecurity, accounting, tax, and compliance obligations should be reviewed with the client’s qualified advisors.

Clear boundary

FAQ

Direct answers to common security questions.

These answers are intentionally plain-English. Security decisions should be specific to the workflow, data, tools, and client requirements.

Can ClearGuide work with sensitive business data?

Yes, but the workflow should be scoped carefully. We identify what data is needed, where it moves, which systems touch it, and what access controls or review steps should be in place.

Do you use customer data to train AI models?

ClearGuide does not train foundation models. When AI platforms are used, data handling depends on the selected vendor, plan, API settings, retention options, and contract terms.

Can AI systems handle finance, legal, HR, or compliance work?

AI can support routing, extraction, summarization, drafting, and review workflows, but it should not replace required professional judgment or final approval.

How do you choose which AI or automation platform to use?

We evaluate fit based on workflow needs, data sensitivity, existing systems, vendor security posture, cost, maintainability, and team adoption.

Can ClearGuide sign an NDA?

Yes, assuming the terms are reasonable and appropriate for the project.

Who owns the systems ClearGuide builds?

The client should retain ownership of their accounts, data, workflows, and documentation. ClearGuide’s role is to help design, build, document, and improve the system.

What happens before you get access to our systems?

We usually start with workflow mapping and discovery. Access should be scoped to what is needed, and credentials should stay client-controlled wherever possible.

Next step

Start with the workflow, the data, and the guardrails.

We can help you identify where AI fits, what data is involved, which tools make sense, and what controls should be in place before anything is built.

Get a Clear Path Forward ->

↑