Mighty

Mighty

Trust Center

trymighty.ai operates in the AI-powered Fraud Detection and Document Verification industry, offering a subscription-based SaaS model with API usage.

The vendor processes highly sensitive customer data, including financial records and personal identification, to detect fraud and manipulation.

A breach could lead to significant client impact.

The company's main domain is trymighty.ai.

According to their public documentation, they are committed to security and compliance, claiming adherence to frameworks such as SOC 2 and ISO 27001, with audit documentation available upon request.

Their service is designed to analyze submitted content and then discard it by default, aiming to minimize data retention.

Their security program includes vulnerability management, access controls via API keys and SSO, and encryption for data in transit.

Resources

Policies, security documentation, and audit-ready evidence. Private items unlock through the access-request flow.

Documents

29 items
  • Public changelog / release notes 1DocumentPrivate
  • Contractor agreement (signed sample) 1DocumentPrivate
  • Incident response plan test (annual) 1DocumentPrivate
  • Disaster recovery exercise records 1DocumentPrivate
  • Performance evaluation records 1DocumentPrivate
  • Physical access records (list & approvals) 1DocumentPrivate
  • Visitor records (log, badges & escort) 1DocumentPrivate
  • Media & device disposal records 1DocumentPrivate
  • Access request records 1DocumentPrivate
  • Targeted risk assessment (new system/project) 1DocumentPrivate
  • Targeted risk assessment (new system/project) 2DocumentPrivate
  • Internal audit report 1DocumentPrivate
  • Nonconformity & corrective action log 1DocumentPrivate
  • Board charter (or management oversight) 1DocumentPrivate
  • Penetration test report 1DocumentPrivate
  • External vulnerability scan report 1DocumentPrivate
  • Privacy policy (public URL) 1DocumentPrivate
  • Security leadership qualifications 1DocumentPrivate
  • Board / leadership profiles 1DocumentPrivate
  • Founder Endpoint Security Evidence 1DocumentPrivate
  • Network diagram (with segmentation zones) 1DocumentPrivate
  • Sensitive data flow diagram 1DocumentPrivate
  • Data inventory & map 1DocumentPrivate
  • Application audit logs 1DocumentPrivate
  • Background check records 1DocumentPrivate
  • Release testing evidence 1DocumentPrivate
  • Backup restore test results 1DocumentPrivate
  • Network security configuration standard 1DocumentPrivate
  • Employee agreement (signed sample) 1DocumentPrivate

Policies

38 items
  • Vulnerability Management ProcedurePolicyPrivate
  • Key Management ProcedurePolicyPrivate
  • Backup & Recovery ProcedurePolicyPrivate
  • Log Review & Monitoring ProcedurePolicyPrivate
  • Incident Response PlanPolicyPrivate
  • Third-Party Risk Assessment ProcedurePolicyPrivate
  • Incident Response ProcedurePolicyPrivate
  • Data Retention & Deletion ProcedurePolicyPrivate
  • Business Continuity Testing ProcedurePolicyPrivate
  • Identity & Access Management ProcedurePolicyPrivate
  • Employee Onboarding ProcedurePolicyPrivate
  • ISMS Master List of DocumentsPolicyPrivate
  • Human Resource Security PolicyPolicyPrivate
  • AI PolicyPolicyPrivate
  • AI Ethics and Trustworthiness PolicyPolicyPrivate
  • Access Control PolicyPolicyPrivate
  • Cryptography PolicyPolicyPrivate
  • Physical Security PolicyPolicyPrivate
  • Information Security Policy (AUP)PolicyPrivate
  • ISMS Information Security Management System (ISMS) PolicyPolicyPrivate
  • ISMS Procedure for Internal AuditsPolicyPrivate
  • ISMS Procedure for Management ReviewPolicyPrivate
  • Information Security Roles and ResponsibilitiesPolicyPrivate
  • Operations Security PolicyPolicyPrivate
  • Secure Development PolicyPolicyPrivate
  • ISMS Procedure for Corrective Action and Continual ImprovementPolicyPrivate
  • Asset Management PolicyPolicyPrivate
  • ISMS Information Security Communication PlanPolicyPrivate
  • Third-Party Management PolicyPolicyPrivate
  • Privacy Compliance PolicyPolicyPrivate
  • Security Project Management PolicyPolicyPrivate
  • Change Management ProcedurePolicyPrivate
  • Data Management PolicyPolicyPrivate
  • Code of ConductPolicyPrivate
  • Business Continuity and Disaster Recovery PlanPolicyPrivate
  • ISMS Risk Assessment and Risk Treatment ProcessPolicyPrivate
  • Risk Management PolicyPolicyPrivate
  • Risk Assessment ProcedurePolicyPrivate