Domu

Governance-first AI collections

domu.ai

Enterprise evidence

Insufficient enterprise evidence

Public information covers security assurance, data handling. Still unresolved: sso & provisioning, access controls, auditability.

6 official sources · Fresh page review · Not independently tested

Sources reviewed 2026-10-29

2 / 7 areas with published evidence · 0 independently verified

Evidence & checks
Security assuranceCompany-published
A complete, exam-ready trail of every decision, SOC 2 Type II certified, and engineered for CFPB, TCPA and PCI.Reviewed 2026-10-29View source
SOC 2 Type II, PCI Compliant, CFPB Compliant, TCPA Compliant, HIPAA Compliant, GDPR CompliantReviewed 2026-10-29View source

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

SSO & provisioningNot found

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

Access controlsNot found

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

AuditabilityNot found

Before relying on it
Verify administrative and data-access events, retention and export.

Data handlingCompany-published
Where Domu processes personal data on behalf of enterprise clients, such processing is governed by a Data Processing Agreement (“DPA”) executed as part of the applicable MSA.Reviewed 2026-10-29View source
These Terms, together with any executed MSA, Order Form, DPA, and Privacy Policy, constitute the entire agreement between the parties on this subject matter.Reviewed 2026-10-29View source

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

Reliability & supportNot found

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

Product effectivenessNot found

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.

Published claims are not verified controls. No hands-on performance or security testing has been performed.

What we know

Platform enforces compliance via pre-launch certification, real-time monitoring, and post-deployment auditing, with low-code API integration.

Worth asking

How do you balance local regulatory shifts with multilingual model updates?

Sources

Evidence details

Enterprise controls

A complete, exam-ready trail of every decision, SOC 2 Type II certified, and engineered for CFPB, TCPA and PCI SOC 2 Type II, PCI Compliant, CFPB Compliant, TCPA Compliant, HIPAA Compliant, GDPR Compliant

Developer access

API availability has not been verified.

Last checked Oct 29, 2026

Company-published evidence, not an independent audit. Unknown means unverified.