Get startedFor enterprises
A patchwork of vendors means mismatched permissions, ten security reviews and no single source of truth. Actaa replaces it with one governed system for the whole company.
01One review
One security review, not ten questionnaires.
When everything runs in one system, control is part of the platform itself.
- 01
Same permissions everywhere
Every module follows the same permissions.
- 02
One source of truth
Search everything the company knows, in one place.
- 03
One supplier to manage
One vendor to govern instead of ten.
02Access
The right people, and only them.
Multi-factor sign-in, role-based access with detailed permissions, and an extra check before sensitive actions.
- 01
Least access first
Access is limited to each department, and people start with only what they need.
- 02
An extra check
Sensitive actions need a second verification before they go through.
- 03
Admins are logged too
Admin operations are written to the audit record too, so you can show how the company is governed.
03Data
Your data stays yours.
Each company is kept apart below the application, data is encrypted when stored and when moving, and personal details are redacted when content is indexed, on each question and again on each answer.
- 01
Never used for training
Actaa runs no training of its own, and the model service it runs on does not train on your content.
- 02
AI budgets per person
Set them, see them, and review the workspace’s AI chats.
- 03
Personal files stay private
Personal files are never read by the AI.
04Joiners and leavers
Clean in, clean out, nothing left behind.
Onboarding steps for people who join and a clean exit for people who leave. Admin work that doesn’t need an admin team.
- 01
Policies people confirm
Publish a policy and track who has read and accepted it.
- 02
A channel for concerns
Concerns go through a recorded, documented channel.
- 03
One step when someone leaves
A single action closes every door.
05Where we stand
A straight answer for every reviewer.
Built to the standards your reviewers care about from day one, with certifications on the roadmap. Data can be exported as JSON or mbox, and deletion is anonymised across every workspace.
- 01
GDPR
The right to erasure (Article 17) and to data portability (Article 20).
Implemented - 02
SOC 2
Controls mapped, with audit logging of sensitive actions.
Not yet certified - 03
ISO 27001
Encryption, access control and auditing mapped to the standard.
Not yet certified - 04
AI in hiring
NYC Local Law 144 and similar laws: several layers of protection in hiring. The AI never makes a hiring decision.
Designed for - 05
HIPAA
No Business Associate Agreement is offered.
Not supported - 06
Mapped to the standards
Encryption, access control and auditing are mapped to the standards above.
06Switching over
An easy switch.
Roles, audit logs, data retention and legal hold come built in. Dedicated onboarding and migration support bring the company across.
- 01
Your own email domain
Mail on your own domain from the first morning.
- 02
Your files still work
Your .docx, .xlsx and .pptx files open and save properly.
- 03
Module by module
Turn each module on or off for each team.
A platform your security team can sign off.
Dedicated onboarding, migration support, and direct answers for your security review.