Customer Value

Narrative intelligence data and privacy FAQs

Frequently asked questions

What security framework does Savo follow? Enterprise customers get additional configuration capabilities like SSO via SAML 2.0 and OIDC, SCIM 2.0 automated provisioning, custom data retention policies, SIEM integration, and IP allowlisting. But the underlying security architecture is identical. A single-user account on our entry tier receives the same encryption, the same tenant isolation, and the same AI governance protections as our largest enterprise deployment.

How does Savo handle AI governance? Savo operates 18 AI agents across our platform. We align to three primary AI governance frameworks simultaneously: the EU AI Act, the NIST AI Risk Management Framework, and ISO 42001. We implement the most restrictive requirement wherever standards overlap. Our AI governance specification covers risk assessment across our entire agent portfolio, bias and fairness monitoring for scoring, human oversight requirements, model lifecycle management, and transparency obligations to participants, customers, and regulators.

Can you complete our security questionnaire?

Yes. The Trust Center provides downloadable security documentation to accelerate your review process. For MLP, manual questionnaire support is available. In a future release, our Trust Agent will be able to answer your specific security questions in real time.

Does Savo have a DPA?

Yes. A comprehensive Data Processing Agreement (DPA) is available during registration for all platform tiers.

What third-party services does Savo use?

Savo provides its sub-processor registry via our Vanta Trust Center. This registry lists all third-party services, detailing their specific purpose, data access scope, and individual security certifications.