Is Sana safe for work?
Low risk · 0Sana Labs · Productivity · facts (medium-confidence)
Sana is low-risk for default at-work use (0/100): it does not train on your data, and holds SOC 2 Type II.
0
Low risk
Watch out: Sana states it does not train models on customer data, holds SOC 2 and ISO 27001, and publishes a subprocessor list and DPA. HIPAA BAA availability and a firm EU data-residency guarantee are not documented publicly, so confirm both before handling PHI or EU-restricted data.
Data and compliance facts
- Trains on consumer-tier data
- No
- Trains on business-tier data
- No
- Training opt-out available
- Unverified
- SOC 2 Type II
- Yes
- ISO 27001
- Yes
- ISO 42001 (AI management)
- Unverified
- GDPR Data Processing Addendum
- Yes
- HIPAA BAA
- Unverified
- EU data residency
- Unverified
- SSO / SAML
- Yes
- Data retention
- Backups are fully anonymised within 30 days of the backup date, then retained only in anonymised form.
- Safer tier
- Enterprise (single-tenant deployment, SAML and SCIM, DPA)
Why it scores 0 out of 100
No risk factors flagged. Strong default data handling.