The questions buyers actually ask.
Answered plainly, in the order they usually come up. Where the answer is no, it says no. If yours is not here, ask on the recon call and we will answer it the same way.
Where your data lives
Where does our data actually live?
In your environment. A CIS is deployed to infrastructure you own, under accounts you control. We are not a destination your operational records get copied into, which is the single largest difference between this and a SaaS product.
Is data encrypted in transit and at rest?
Yes. In transit over TLS, and at rest using the encryption your platform provides. We do not write our own cryptography, which is the correct decision for a firm our size.
How are API keys and OAuth tokens stored?
In your secret store, inside your environment, scoped to a single purpose. They are credentials you issue and can rotate or revoke at any time. We do not keep a copy outside the system they belong to.
Can a CIS be deployed on-premise for regulated data?
Yes. Deploying into infrastructure you control is the default rather than an upgrade. If that infrastructure is a server in your building rather than a cloud account, that is a scoping question, not an obstacle.
Access and offboarding
Who at Convoy can reach our systems?
Only the people working on your build, only while the engagement needs it, and only through named accounts you created. There is no standing access after handover unless you keep a maintenance plan running, and you can revoke any of it without asking us.
Do you need admin access to our tools?
Usually not. We ask for the narrowest permission that lets the job run, and read-only wherever reading is enough. Where a write permission is genuinely required, we tell you which system, which action and why, and it goes in Schedule A.
What happens to our data if we end the engagement?
You revoke our access. The system, the code and the data are already yours and already in your environment, so there is nothing for us to return and nothing for us to retain.
Compliance and paperwork
Does Convoy hold SOC 2, ISO or HIPAA certification?
No, and we will not imply otherwise. Convoy is a build firm, not a hosting platform. The audited controls that matter for your CIS sit with the cloud and model providers it runs on, and in most engagements that is your own cloud account rather than ours.
What is the difference between certification we hold and certification we inherit?
Held means an auditor examined our own controls and issued a report. Inherited means the platform the system runs on has been audited. We inherit; we do not hold. It matters because a vendor claiming a certification it merely benefits from is telling you something untrue about who was actually examined.
Will you name every provider involved?
Yes, in writing, in Schedule A before the build starts. If a provider changes during the engagement we tell you before it happens.
Is a Data Processing Agreement available?
Yes. Ask and we will send one.
Can you complete our vendor security questionnaire?
Yes. Send it and we will complete it directly rather than pointing you at a page. Answers will be specific, and where the answer is no, it will say no.
AI and how it runs
Is our data used to train an AI model?
No. We work with model providers on terms that exclude customer data from training, and we do not build training sets out of client work. If your engagement requires a specific provider or a written commitment on this point, it is named in Schedule A before the build starts.
Which AI models do you use, and can we choose?
Chosen per engagement and named in Schedule A. If you require a particular provider, or require that a class of data never reaches a model at all, that is decided with you before anything is built.
What happens if something goes wrong?
We tell you, in writing, with what happened, what was affected and what we are doing about it. Watchdog exists to catch failures before they reach your floor, and where you have set a lockdown threshold it acts before anyone is available to.
Still have a question?
Send us your security questionnaire and we will complete it directly, or book a recon and ask on the call.
Rather just email us? Click here
Book a call
Thirty minutes on your operation. No cost, no obligation.
Book the recon call → Or send the brief first →