Security, stated plainly
This page is written for the person filling in the security questionnaire. Claims here are limited to what is attained today; anything in progress is not listed until it is certified.
Security summary
ISO 27001
Rainbird operates an ISO 27001 certified information security management system. Certificate scope and the current certificate are available to prospective customers on request during security review.
HIPAA posture
For US healthcare deployments Rainbird supports HIPAA-aligned processing, including business associate arrangements and the deployment patterns that keep protected health information inside your boundary.
GDPR and automated decisions
Because every decision returns its evidence tree, Article 22 obligations around automated decision-making and the right to an explanation are met by the mechanism rather than by a post-hoc report.
Where it runs
Managed cloud, private cloud, in-region deployment or fully self-hosted. Data residency is confirmed per deployment; the reasoning engine can run entirely inside your own estate.
Your rules, your graph, your file
The knowledge graph is a portable export. You can leave with your decision logic at any time, along with its evals and version history.
Responsible disclosure
Report a suspected vulnerability via the contact us page. We acknowledge good faith reports and keep reporters updated through triage.