Security FAQ
Direct answers to common diligence questions.
Has Kimpton completed SOC 2 Type II?
Yes. The Privacy Policy and DPA state that Kimpton has completed a SOC 2 Type II audit. Request the current report through security@kimpton.ai or the trust portal.
Can Kimpton trade or move funds?
No. The brokerage connection is read-only. For Enterprise, published model portfolios are target allocations rather than access to live client accounts. See Portfolios.
Is our content used to train AI models?
Kimpton's Privacy Policy says portfolio data, queries, and analysis results are not used to train AI models. Check the current policy and your organization's agreement for the binding terms.
Who can see a document or report?
That depends on its user, team, and organization sharing settings. Referencing a document does not grant another person access. Before sending a workflow to a Slack channel, check the wider Viewer access it can grant.
How do we request deletion or a DPA?
Contact info@kimpton.ai for account-data deletion or agreement questions. The Privacy Policy describes retention and rights; the DPA describes contractual deletion, exceptions, and sub-processors.
Report a security issue to security@kimpton.ai.