Security & trust

How we keep your information safe.

You share a lot with Mitra to help manage your life. Here is how we protect it: through careful design, not just promises.

EncryptionYour information is encrypted while it travels and while it's stored. Messages between people, you and another member, or you and a provider, are designed to use end-to-end encryption (only you and the intended recipient can read them). Conversations with our AI assistant work differently: the assistant has to read your message to help you, so those conversations are protected by strict access controls and logging instead. Our staff can only see your information to run the service, help with something you've asked, look into misuse, or meet a legal requirement, and every time they do, it's recorded.

Verified identityYou sign in with your face or fingerprint, and we verify your identity and any relevant credentials through Mitra Vault. Important actions ask you to confirm again in the moment, using your presence, not a password that could be stolen.

Separated by designYour financial, health, travel, and family information are each kept in their own separate, locked-down storage. A problem in one area can't spill over and expose another.

Checks before it countsAnything involving money, health information, or a booking you can't undo gets checked by an independent safety review and needs your clear approval before it happens. The AI can suggest, but only you decide.

A record you can trustEvery action taken on Mitra, by you, by our AI, or by a partner, is written to a secure record that can't be quietly changed or deleted. If it happened on Mitra, there's a record of it.

A real person when you need oneEvery escalation ends with a real, accountable person. There's no other agent above them. That person works for a service provider on the platform, either one you already have a relationship with (for example, through a benefit on a card you hold), or another listed provider ready to help. You'll never be dropped into an anonymous queue.

This describes how Mitra is designed and built. The platform isn't generally available yet, so treat this as the design your information will be held to, not as controls that have been independently audited today. Our current compliance status is below, and the privacy policy states which protections are in place right now.

Compliance posture

We've designed our security practices to follow SOC 2 and ISO 27001, two respected security frameworks, and we plan an independent SOC 2 audit as we get closer to general availability. Every partner we integrate with has to pass a security check before they can handle any member traffic. If you have security questions, reach out through the contact page.

Responsible disclosure

If you think you've found a security vulnerability, please contact us through the contact page. We acknowledge reports promptly and won't pursue legal action against good-faith researchers.

Create your Mitra account.

Verify your phone, set up a passkey, and you're in: no waiting list, no forms. If Mitra sounds useful to you, we'd love to have you.

Get early access