Security

Security is not a checkbox. It's the product.

We hold ourselves to the same standards we help our customers achieve.

SOC 2 Type II

CERTIFIED

Audited annually by an independent CPA firm. Security, Availability, and Confidentiality trust service criteria.

AES-256

All customer data encrypted with AES-256. Database encryption keys rotated quarterly.

TLS 1.3

TLS 1.3 for all data in transit. TLS 1.0 and 1.1 disabled. Certificate transparency enforced.

ZERO TRUST

Mandatory MFA for all employees. Role-based access control. Privileged access reviewed quarterly.

CONTINUOUS

Continuous vulnerability scanning. Annual third-party penetration testing. Critical patches applied within 24 hours.

COMPLIANT

Data Processing Agreements available. Data residency options available for EU customers. DPO appointed.

SOC 2 Type II report, penetration test summary, and Data Processing Agreement available under NDA.