Security built
for nuclear work.
Nuclearn's information security management system is certified to ISO/IEC 27001:2022. Each plant gets its own single-tenant instance, hosted by Nuclearn in its own datacenter on its own hardware and set up for 10 CFR Part 810.
Independently certified to ISO/IEC 27001:2022.
A-LIGN certifies that Nuclearn operates an information security management system that conforms to ISO/IEC 27001:2022.
Its scope covers the design, development, deployment and support of Nuclearn's AI solutions for the nuclear and regulated utility industries, and the people, processes and technology behind them, as operated from Nuclearn's offices and approved secure hosting facilities. The certificate lists the full scope and the services in it.
The certificate applies to Nuclearn's information security management system. As with any ISO/IEC 27001 certificate, it doesn't certify individual products.
SOC 2 Type I
Nuclearn's SOC 2 Type I report is available on request for your vendor assessment and security review.
Request the SOC 2 Type I report →ISO/IEC 27001:2022
- Organization
- Nuclearn Inc.
- Certificate
- ISMS-NU-031726
- Certified by
- A-LIGN Compliance and Security, Inc.
- Certified
- March 17, 2026
- Expires
- March 17, 2029
- Statement of Applicability
- Version 1.2, January 9, 2026
Your data stays in your plant's own instance.
All Nuclearn products run on the Nuclearn platform, so the same hosting, sign-in and access controls apply to each one. Governance and deployment on the platform →
Single-tenant, hosted by Nuclearn
Each plant gets its own instance, hosted by Nuclearn in its own datacenter on its own hardware. Azure Government or your own servers on request.
Built for 10 CFR Part 810
How Nuclearn products are hosted, operated and supported is set up for 10 CFR Part 810 export controls.
Your single sign-on
People sign in through the Nuclearn platform, with single sign-on through your identity provider, such as Microsoft Entra ID, Okta or Ping.
Roles and permissions
Platform roles and dataset permissions decide who can see, run and change what in each product.
Connect runs in your network
Nuclearn Connect brings documents in from the document management systems your plant already uses, over outbound HTTPS. It opens no inbound ports.
Keyed access for tools
Your systems and approved AI tools reach product APIs with a Nuclearn platform API key, so the same roles apply.
Questions security teams ask first
What does the ISO/IEC 27001:2022 certificate cover?
Nuclearn's information security management system: the design, development, deployment and support of its AI solutions for the nuclear and regulated utility industries, and the people, processes and technology behind them. The certificate, ISMS-NU-031726 from A-LIGN, lists the scope and the services in it. Download it here.
Where is our data hosted?
In your plant's own single-tenant instance, hosted by Nuclearn in its own datacenter on its own hardware. Hosting, operations and support are set up for 10 CFR Part 810 export controls. Azure Government or your own servers on request.
How do people sign in?
Through the Nuclearn platform, with single sign-on through your identity provider. Products keep no separate user store, and platform roles decide what each person can do.
Do we have to open our firewall?
No inbound opening. Nuclearn Connect runs inside your network next to your document sources and sends new and changed documents out to your Nuclearn instance over outbound HTTPS.
Do you have a SOC 2 report?
Yes. Nuclearn's SOC 2 Type I report is available on request for your vendor assessment. Request the report.
Can we get more for our security review?
Yes. Ask us for the details your security team needs for its questionnaire, and Nuclearn will set up a call with its engineering team.
Bring your security team's questions.
We'll walk through hosting, sign-in, data, the certificate and the SOC 2 Type I report with your IT and security staff.