Security Policy

1. PURPOSE

Saees maintains a security program designed to protect Customer Data, Personal Data, credentials, platform availability, and the integrity of marketplace integrations.

This public policy summarizes the security practices available to Customers and prospective Enterprise Customers. It does not disclose sensitive implementation details that could weaken the Services.

2. SCOPE

This policy applies to the Saees AI, its production infrastructure, APIs, authentication services, AI Services, marketplace integrations, supporting personnel, and approved service providers.

3. SECURITY PRINCIPLES

Saees applies least privilege, defense in depth, secure-by-default configuration, separation of duties, change control, continuous monitoring, incident response, and risk-based improvement.

4. ACCESS CONTROL

Access to production systems is restricted to authorized personnel with a documented business need. Saees uses role-based access, strong authentication, approval workflows, periodic access reviews, and prompt revocation when access is no longer required.

5. DATA PROTECTION

Saees uses commercially reasonable safeguards for data in transit and at rest. Marketplace credentials, API secrets, encryption keys, and other sensitive values are stored in protected secret-management systems and are not committed to public repositories.

6. SECURE DEVELOPMENT

Saees uses code review, dependency management, security testing, controlled deployments, logging, and vulnerability remediation practices appropriate to the risk and maturity of each Service.

7. MONITORING AND RESPONSE

Saees monitors platform health, authentication events, application errors, infrastructure signals, integration failures, and security alerts. Suspected incidents are handled under the Incident Response Policy and applicable contractual commitments.

8. CUSTOMER RESPONSIBILITIES

Customers must protect their credentials, configure authorized Users correctly, use supported integrations, report suspected security issues promptly, and avoid placing secrets or unnecessary sensitive data in support requests.

9. CONTACT

Security reports: security@saees.ai

Legal and privacy requests: legal@saees.ai and privacy@saees.ai

Mailing Address: Saees LLC, 4730 University Wy NE, Seattle, WA 98105

10. RELATED DOCUMENTS

This policy should be read with the Privacy Policy, Data Processing Addendum, Acceptable Use Policy, AI Policy, SLA, Incident Response Policy, and Vulnerability Disclosure Policy.

11. LEGAL REVIEW

This document should be reviewed by qualified legal counsel experienced in SaaS, information security, privacy, and technology transactions under Washington State and United States federal law.