# Chordian

Institutional memory layer

Research: https://www.safecli.org/company/chordian.ai
Company: https://chordian.ai

## Evidence status

Procurement review needed
Source review: 2026-10-16T03:30:08.037Z
API: API mentioned

Company-published claims, not independently verified controls. Unknown is not evidence of absence.

## Procurement checks

### Security assurance — Needs clarification

> SOC 2 certification in progress.

Source: https://chordian.ai/enterprise/
Reviewed: 2026-10-16T03:30:08.037Z

- [ ] Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### SSO & provisioning — Company-published

> SSO (SAML 2.0, OIDC).

Source: https://chordian.ai/enterprise/
Reviewed: 2026-10-16T03:30:08.037Z

- [ ] Test SSO enforcement, user removal and privileged-account recovery.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Access controls — Company-published

> Chordian Cloud with dedicated tenant isolation, Private Cloud in your own AWS, GCP, or Azure account (BYOC), or full On-Premises for regulated workloads.

Source: https://chordian.ai/enterprise/
Reviewed: 2026-10-16T03:30:08.037Z

- [ ] Test least-privilege roles and cross-tenant access with separate test accounts.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Auditability — Company-published

> Full audit trail on every interaction.

Source: https://chordian.ai/
Reviewed: 2026-10-16T03:30:08.037Z

> Full audit trail.

Source: https://chordian.ai/
Reviewed: 2026-10-16T03:30:08.037Z

- [ ] Verify administrative and data-access events, retention and export.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Data handling — Company-published

> Full deployment architecture documentation, security questionnaire support, encryption key management, penetration test results available on request, data processing agreement.

Source: https://chordian.ai/enterprise/
Reviewed: 2026-10-16T03:30:08.037Z

> GDPR data processing agreement.

Source: https://chordian.ai/enterprise/
Reviewed: 2026-10-16T03:30:08.037Z

- [ ] Review DPA, subprocessors, retention, deletion, residency and AI training use.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Reliability & support — Company-published

> - 99.9% uptime SLA

Source: https://chordian.ai/
Reviewed: 2026-10-16T03:30:08.037Z

> SLA commitment.

Source: https://chordian.ai/enterprise/
Reviewed: 2026-10-16T03:30:08.037Z

- [ ] Request SLA, incident history, recovery targets and support escalation terms.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Product effectiveness — Company-published

> BM25 exact-match precision for proper nouns, contract numbers, and structured data queries.

Source: https://chordian.ai/
Reviewed: 2026-10-16T03:30:08.037Z

- [ ] Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

## Decision

- Owner:
- Intended use and data sensitivity:
- Blocking requirements:
- Pilot success criteria:
- Unresolved risks:
- Decision and review date: