SOC 2 Type II
Titan is SOC 2 Type II audited. The report is available on request.
Trust & Security
Trust and Security at Titan.
Titan holds claim files, party data, and financial records that have to stand up to procurement review and regulatory scrutiny. Security is built into the platform, not added on later.
HIPAA
Titan is HIPAA compliant. We handle protected health information under the controls that standard requires.
SSO / SAML
SAML SSO and granular role-based access, so your team keeps control of who can see a file.
Encryption
Encrypted in transit (TLS 1.2+) and at rest, by default.
Audit logs
Every user and system action is logged — who did what, on which file, and when.
Data lifecycle
Retention, deletion, and export controls on the file.
Google Cloud
Hosted on Google Cloud Platform, with region selectable.
Subprocessors
View the list hereAI governance
Built for how insurers have to govern AI.
Claims AI has to meet the high security and compliance standards required of the insurance industry. We take that seriously. Titan is built around the NAIC Model Bulletin and the NIST AI Risk Management Framework, so you have a product that meets those expectations.
NAIC Model Bulletin
Human review, evidence on the file, and a clear decision trail — what the Model Bulletin on the Use of AI Systems by Insurers expects.
NAIC on artificial intelligenceNIST AI RMF
Govern, map, measure, and manage. The NIST AI Risk Management Framework is guidance, not a certification.
NIST AI Risk Management Framework- Titan prepares the next action. A person approves, edits, or escalates before anything commits.
- The recommendation stays with the evidence on the file — policy, notes, and documents together.
- Every user and system action is logged.
- Customer data is never used to train shared models.
Common questions
Can we get your SOC 2 Type II report?
Yes. You may request it at security@titancre.ai.
Can you complete our vendor IT security due diligence questionnaire?
Yes. You may send it to security@titancre.ai. We regularly complete carrier and TPA security questionnaires.
Do you have an audit trail of activity in the product?
Yes. Titan logs who did what, on which file, and when. That trail is available to your team, and to an auditor if they ask.
Does Titan help us meet the NAIC Model Bulletin?
Yes. Titan keeps a record of the recommended action, the evidence on the file, and the human decision, so you have a clear trail for review.
Do you train models on our claims data?
No. Your data is not used to train shared models. Providers are contractually prohibited from doing so.
How do we start a security review?
You may start one at security@titancre.ai. We will share the report, complete your questionnaire, and walk through controls with your team.
Running a security review or vendor questionnaire?
You may request the documentation your team needs at security@titancre.ai.