Security and compliance
The Napster Companion API is built with enterprise-grade security standards.
- SOC 2 Type II — Full report available under NDA.
- GDPR & CCPA — Compliant with US and EU data protection regulations.
- Encryption — AES at rest, TLS 1.2+ in transit.
- Penetration testing — Annual third-party security audits.
- Data residency — Regional storage options for enterprise customers.
- Tenant isolation — Your data stays in your environment. No cross-customer data mixing. Napster does not train models on your data.
Built-in safety governance
Content moderation, crisis detection, topic restrictions, and full session auditability are active on every agent at the platform level — not optional add-ons.
Tip: For enterprise deployments requiring custom data residency, contact Napster Sales.