Chordian

Institutional memory layer

chordian.ai

Enterprise evidence

Procurement review needed

Public information covers sso & provisioning, access controls, auditability. Still unresolved: security assurance.

2 official sources · Fresh page review · Not independently tested

Sources reviewed 2026-10-16

6 / 7 areas with published evidence · 0 independently verified

Evidence & checks

Security assuranceNeeds clarification

SOC 2 certification in progress.Reviewed 2026-10-16View source

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

SSO & provisioningCompany-published

SSO (SAML 2.0, OIDC).Reviewed 2026-10-16View source

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

Access controlsCompany-published

Chordian Cloud with dedicated tenant isolation, Private Cloud in your own AWS, GCP, or Azure account (BYOC), or full On-Premises for regulated workloads.Reviewed 2026-10-16View source

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

AuditabilityCompany-published

Full audit trail on every interaction.Reviewed 2026-10-16View source

Full audit trail.Reviewed 2026-10-16View source

Before relying on it
Verify administrative and data-access events, retention and export.

Data handlingCompany-published

Full deployment architecture documentation, security questionnaire support, encryption key management, penetration test results available on request, data processing agreement.Reviewed 2026-10-16View source

GDPR data processing agreement.Reviewed 2026-10-16View source

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

Reliability & supportCompany-published

- 99.9% uptime SLAReviewed 2026-10-16View source

SLA commitment.Reviewed 2026-10-16View source

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

Product effectivenessCompany-published

BM25 exact-match precision for proper nouns, contract numbers, and structured data queries.Reviewed 2026-10-16View source

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.

Published claims are not verified controls. No hands-on performance or security testing has been performed.

What we know

Provides private deployment in customer-owned cloud or on-premises, with GDPR/HIPAA-ready architecture and bi-temporal state tracking.

Worth asking

Can fine-grained access control be enforced at the memory-node level in high-velocity agentic loops?

Sources

Evidence details

Enterprise controls

SOC 2 certification in progress

Developer access

#### REST API Full API documentation

Last checked Oct 16, 2026

Company-published evidence, not an independent audit. Unknown means unverified.