> ## Documentation Index
> Fetch the complete documentation index at: https://docs.clarasdr.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Deployment & security

> Deployment options, access controls, encryption, audit logging, and the certifications behind Clara.

Clara is enterprise-grade by default: certified security practices, encrypted data, controlled access, and deployment options that match your requirements.

## Certifications

Don't just take our word for it - Clara is certified to protect sensitive data, whatever your industry:

| Certification     | Scope                                                            |
| ----------------- | ---------------------------------------------------------------- |
| **SOC 2 Type II** | Verified security practices for enterprise-grade data protection |
| **GDPR**          | Advanced privacy standards for personal data protection          |
| **HIPAA**         | Secure, certified handling of sensitive health information       |
| **ISO 27001**     | Global excellence in information security management             |

## Deployment options

### Cloud hosted

The default Clara deployment: fully managed SaaS with automatic updates and scaling. Launch in minutes with the [website embed](/docs/embed/website-embed).

### Enterprise deployment

For organizations with dedicated infrastructure requirements:

* Dedicated environments isolated from other customers
* Private networking between Clara and your systems
* Custom infrastructure and compliance requirements

[Contact us](mailto:support@trugen.ai) to scope an enterprise deployment.

## Access control

| Control                   | What it manages                                      |
| ------------------------- | ---------------------------------------------------- |
| Workspace permissions     | Who can access which workspaces                      |
| Team-level policies       | What operators and read-only members can do          |
| Administrative management | Who can configure agents, integrations, and security |

## Data protection

* **Encryption in transit** - all buyer conversations and API traffic are encrypted
* **Encryption at rest** - stored conversation data is encrypted
* **Secure conversation storage** - transcripts and qualification records are access-controlled
* **Customer data protection** - your material and your buyers' data stay yours

## Audit logging

Every meaningful action is logged:

* Workflow execution activity
* CRM synchronization events
* Administrative actions

Audit logs support your compliance reviews and incident investigations.