Live today
Per-Engagement NDAs & BAAs
NDAs and, where applicable to your industry, Business Associate Agreements are executed as part of the discovery process before any client data is handled — not a blanket program, a per-client legal document.
Matter / Client Data Isolation
Every engagement is architected so one client's or matter's data cannot surface in another's outputs — a design principle applied from the first line of an agent's prompt architecture.
Zero Training on Client Data
Client data is not used to train underlying AI models, per current model vendor policy. We're formalizing this as a written vendor commitment (see roadmap below).
Human-in-the-Loop, Always
Every agent workflow we deploy includes a deliberate human approval gate. We don't ship full automation into regulated workflows — your team reviews before anything ships.
In progress — our compliance roadmap
These are named because they are specific, in-progress commitments — not because they're done. We'll update this page as each moves from "in progress" to "complete," and link the actual attestation once one exists.
SOC 2 Attestation
Formal SOC 2 attestation is on our roadmap. A current security posture summary is available on request for firms evaluating a pilot.
BAA-Eligible Cloud Infrastructure
Client deployments are designed around a BAA-eligible cloud environment with encryption at rest and in transit. This is architecture we design to, standing up per engagement — not a shared always-on platform yet.
Written Vendor DPAs
We're formalizing written data-processing agreements with our AI model vendors so "zero training on client data" is a contractual term, not just current policy.
How this website itself handles data
Separate from client engagements above, here's what happens on this marketing site specifically:
- The Apollo Client Builder runs entirely in your browser. Nothing you type into it is transmitted to us or stored anywhere.
- The Contact form is processed by Formspree, a third-party form provider, and relayed to our inbox.
- We use cookieless Vercel Web Analytics to see aggregate traffic and feature usage — no cookies, no cross-site tracking, no ad pixels.
Full detail, including every third party this site loads resources from, is in our Privacy Policy.
For prospective clients: if you're evaluating Apollo for a pilot in a regulated vertical, ask your point of contact for our current security posture summary, NDA template, and BAA template — we'll send them before the first substantive call, not after you ask twice.