Start Earning →
Enterprise Trust Center

Trust & Compliance Center

MyAi Network is built for institutional adoption. This page documents our security controls, compliance and regulatory posture, data handling practices, reliability reporting, and the current status of our certification programs — everything regulated entities, OTC desks, and enterprise teams need to evaluate our platform.

[email protected]SecurityDocsAPI Status

🏆 Certifications & Standards

🔒SOC 2
In progress

SOC 2 program in progress — no report issued yet.

🛡️ISO 27001
Planned

International information security management standard. Not yet certified.

⚖️GDPR
Implemented

EU data-subject rights (access, correction, export, deletion), retention limits and sub-processors are documented in Data Handling & Privacy below. Data processing agreement available on request. Self-assessed — not a third-party certification.

Privacy Policy §6 →
🇺🇸CCPA
Implemented

California consumer rights (access, deletion, export) for US users, documented in Data Handling & Privacy below and our Privacy Policy. Self-assessed — not a third-party certification.

Privacy Policy §6 →

🏛️ Regulatory posture

The items below describe how we operate, not credentials we hold. None of them is a registration, license or third-party certification.

💰AML/BSA program (FinCEN-aligned)
Operational posture — not a certification

AML, sanctions and transaction-monitoring controls run on Infinihash KYC/KYT infrastructure. This is an internal compliance posture, not a FinCEN registration, license or certification.

🛡️ Infinihash Compliance Infrastructure

MyAi is a product of Infinihash LLC and is backed by Infinihash's institutional compliance suite — the same infrastructure used by regulated exchanges, OTC desks, and digital asset custodians.

👁️KYC Platform
  • AI-powered identity verification
  • 10,000+ sanctions labels (incl. OFAC SDN)
  • AML risk scoring (0–100 scale)
  • PEP and adverse media screening
  • Document verification (150+ countries)
  • Real-time entity risk scoring
📡KYT Engine
  • Real-time transaction monitoring
  • Multi-chain coverage including BTC, ETH, BSC, Base, Tron, Solana
  • OpenCorporates entity enrichment
  • GDELT news risk analysis
  • Automated compliance alerts
  • Customizable risk thresholds

👥 Role-Based Access Control (RBAC)

Enterprise accounts support granular role-based access control. Assign team members specific permissions aligned with their function — minimizing exposure and satisfying least-privilege requirements.

👑
Owner
Full access. Billing, team management, API key creation, all data.
🔧
Admin
All operational access. Cannot manage billing or delete org.
📋
Compliance Officer
Read-only access to audit logs, KYC/KYT reports, user activity.
💻
Developer
API access, job submission, model access. No admin or billing.
📊
Analyst
Dashboard read access, report exports. No API or write access.
🔍
Auditor
Immutable audit log access only. Cannot modify any data.
📌 RBAC is available on Enterprise tier. SSO integration (SAML 2.0, OIDC) available on request. Contact [email protected]

📊 Reliability

We don't publish uptime or response-time figures until we can substantiate them. Live status is available at myaitoken.io/status.

🔐 Security Controls

All 12 controls below are implemented and active across MyAi Network and the Infinihash compliance stack.

✓JWT RS256 token authentication with short-lived access tokens
✓API key rotation policy (90-day recommended rotation)
✓TLS 1.3 encryption in transit on all endpoints
✓AES-256 encryption at rest for all sensitive data
✓Cloudflare WAF + DDoS mitigation (enterprise tier)
✓Rate limiting: plan limits are published targets; API-level enforcement is not currently enabled
✓IP allowlisting available for enterprise accounts
✓Comprehensive audit logging with tamper-evident storage
✓Zero-trust network architecture
✓Automated vulnerability scanning (weekly)
✓Dependency security scanning (Dependabot)
✓Secrets management via environment isolation

💾 Data Handling & Privacy

Data residencyUS (primary), EU (available on request)
Inference job retentionPrompt data: NOT stored by default. Job metadata: 90 days.
KYC data retention7 years (regulatory requirement), encrypted at rest
Audit logs retentionMinimum 7 years, immutable storage
Data deletionAccount deletion within 30 days of request
Data exportFull export available in JSON/CSV on request
Sub-processorsAWS (infrastructure), Cloudflare (CDN/WAF), Resend (email)
DPA availabilityEnterprise DPA available — contact [email protected]

Enterprise & Institutional Inquiries

For white-glove onboarding, DPA execution, security reviews, or enterprise licensing — reach out directly.

Enterprise SalesLegal & DPASecurity TeamPress & Media

Need help? support.infinihash.com or [email protected]

← HomeSecurityDocsCommunityBuy MYAI