Security

Last updated: 2026-05-02

Infrastructure

AskBase runs on Amazon Web Services (AWS), hosted in the us-east-1 region. We use managed AWS services including RDS (PostgreSQL), ElastiCache (Redis), SQS, and Cognito for authentication. All data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher.

Access controls

AskBase enforces role-based access control at the database level. Permission filtering applies at the query layer, not in application code. Every query and every admin action generates an immutable audit log entry. Users can only access documents their organisation has granted them permission to see.

Authentication

Authentication is handled by AWS Cognito. Passwords are never stored in plaintext. Multi-factor authentication is available and recommended for administrator accounts. Session tokens expire per the token lifecycle defined in your organisation's settings.

Vulnerability management

We apply dependency patches on a rolling basis and run automated dependency audits in CI. Critical security patches are applied within 24 hours. We use Sentry for real-time error monitoring and anomaly detection.

SOC 2

AskBase is built on AWS infrastructure inheriting AWS's SOC 2 Type II controls. We have not yet engaged a third-party assessor for an AskBase-specific SOC 2 audit. Our roadmap reflects engagement timing tied to enterprise customer requirements; current customers can request our security questionnaire response and AWS Artifact-derived sub-processor attestations.

Responsible disclosure

If you discover a security vulnerability, please report it to hi@neeshinc.ca with the subject line "Security Disclosure." We will acknowledge your report within one business day and provide an initial assessment within five business days. We ask that you do not publicly disclose the issue until we have had reasonable time to address it.

Sub-processors and data flow

A full list of the third-party services we use to process data is available on our Subprocessors page. AI inference is provided by Anthropic (Claude) and OpenAI. Neither provider is permitted to use your data for model training under our agreements with them.

Contact

neesh Inc. · 112 King Street East, Hamilton, Ontario, L8N 1A8, Canada
hi@neeshinc.ca