Security is foundational.
Knowledge is sensitive. We've built Sorika with a security-first architecture to ensure your thoughts, research, and data remain strictly yours.
E2E Encryption
For private spaces, data is encrypted on your device before it ever reaches our servers.
SOC 2 Type II
Our infrastructure and processes are regularly audited by independent security firms.
GDPR Compliant
Full compliance with European data protection regulations. You own your data.
Zero-Knowledge
For E2E spaces, we have zero knowledge of your encryption keys. We cannot read your data.
Audit Logs
Enterprise accounts get granular, immutable audit logs for all workspace activity.
SSO / SAML
Integrate with Okta, Azure AD, or Google Workspace for secure identity management.
Our Infrastructure
We host Sorika on top-tier cloud providers (AWS and GCP) utilizing virtual private clouds, isolated subnets, and strict firewall rules. All data is encrypted at rest using AES-256 and in transit using TLS 1.3.
No AI Training on Customer Data
We guarantee that we do not use your personal or corporate data to train our foundational models. The AI features in Sorika operate strictly on an inference basis within your secure context window.
When you query your knowledge graph, the context retrieved is temporarily processed by the model to generate a response and is immediately discarded. It is never logged or used to improve the base model.
Bug Bounty Program
We believe in the power of the security research community. If you believe you have found a security vulnerability in Sorika, we encourage you to report it to us.
We offer bounties for qualifying vulnerabilities. Please review our policy on HackerOne before submitting a report.