Security FAQs Answers to common security questionnaire questions from enterprise IT, security and procurement teams
Open inClaude ChatGPT Gemini Grok Answers to frequently asked questions from enterprise procurement and security teams. Each answer links to the page with more detail. For a one-page summary, see the Trust Center .
Can I choose a different data region? Do I need to allowlist IP addresses? Who owns the data I upload? Do you sell customer data? What personal data do you hold? Who are your subprocessors? How are encryption keys managed? How is my data kept separate from other customers? Do you support Single Sign-On (SSO)? Do you support Multi-Factor Authentication (MFA)? What are your password rules? How long do sessions last? Do you support SCIM provisioning? Can I control what my team members can access? What happens when an employee leaves? Do PetroBench staff have access to my data? Is AI turned on by default? Can AI be turned off after it is enabled? Is our data used to train AI models? How does MCP access work? How do you manage vulnerabilities? How do you manage changes to production? What frameworks does your security program follow? Can I see the audit log for my organization? What are your backup and disaster recovery capabilities? How will you notify us of a security incident? How do you protect against DDoS attacks? What is your uptime commitment? What happens to our data at contract end? Can I get a copy of my data? Can you fill out our security questionnaire? Can we get copies of your security policies? Do you handle ITAR-controlled data? For security questions not answered here:
Email: legal@petrobench.com