Trust, with evidence.
Every claim links to a document, a scope or a log. Request what you need.
Trust, with evidence.
Every claim links to a document, a scope or a log. Request what you need.
Trust, with evidence.
Every claim links to a document, a scope or a log. Request what you need.
Compliance
Certified and scoped.
Compliance
Certified and scoped.
Compliance
Certified and scoped.
Controls
What we run.
Data
Encryption
TLS 1.3 in transit. AES-256 at rest. Customer managed token keys.
Access
Least privilege
Role based, reviewed quarterly, every grant logged.
Logs
No raw text
Audit logs hold field type and time. Never the value.
Vendors
Reviewed
Every subprocessor assessed before onboarding.
People
Trained
Background checks and yearly security training.
Response
72 hour notice
Incident process tested twice a year.
Controls
What we run.
Data
Encryption
TLS 1.3 in transit. AES-256 at rest. Customer managed token keys.
Access
Least privilege
Role based, reviewed quarterly, every grant logged.
Logs
No raw text
Audit logs hold field type and time. Never the value.
Vendors
Reviewed
Every subprocessor assessed before onboarding.
People
Trained
Background checks and yearly security training.
Response
72 hour notice
Incident process tested twice a year.
Controls
What we run.
Data
Encryption
TLS 1.3 in transit. AES-256 at rest. Customer managed token keys.
Access
Least privilege
Role based, reviewed quarterly, every grant logged.
Logs
No raw text
Audit logs hold field type and time. Never the value.
Vendors
Reviewed
Every subprocessor assessed before onboarding.
People
Trained
Background checks and yearly security training.
Response
72 hour notice
Incident process tested twice a year.
Documents
Ask for what you need.
Most are shared under NDA within one business day.
Document
Covers
Access
SOC 2 Type II report
Security, availability, confidentiality
On request
Penetration test summary
Annual external test, scope and fixes
On request
Security whitepaper
Architecture and data flow
Public
Data processing addendum
Processor commitments
Public
Subprocessor list
Vendors and regions
Public
Business continuity plan
Recovery targets and tests
On request
Documents
Ask for what you need.
Most are shared under NDA within one business day.
Document
Covers
Access
SOC 2 Type II report
Security, availability, confidentiality
On request
Penetration test summary
Annual external test, scope and fixes
On request
Security whitepaper
Architecture and data flow
Public
Data processing addendum
Processor commitments
Public
Subprocessor list
Vendors and regions
Public
Business continuity plan
Recovery targets and tests
On request
Documents
Ask for what you need.
Most are shared under NDA within one business day.
Document
Covers
Access
SOC 2 Type II report
Security, availability, confidentiality
On request
Penetration test summary
Annual external test, scope and fixes
On request
Security whitepaper
Architecture and data flow
Public
Data processing addendum
Processor commitments
Public
Subprocessor list
Vendors and regions
Public
Business continuity plan
Recovery targets and tests
On request
FAQ
Common asks.
Can I see the SOC 2 report?
Yes, under NDA. Use the form above.
Do you run penetration tests?
Yearly, by an independent firm. A summary is available.
Where is data processed?
In the region you choose: EU, US or Gulf.
Do you offer a BAA?
Yes, on Enterprise plans.
FAQ
Common asks.
Can I see the SOC 2 report?
Yes, under NDA. Use the form above.
Do you run penetration tests?
Yearly, by an independent firm. A summary is available.
Where is data processed?
In the region you choose: EU, US or Gulf.
Do you offer a BAA?
Yes, on Enterprise plans.
FAQ
Common asks.
Can I see the SOC 2 report?
Yes, under NDA. Use the form above.
Do you run penetration tests?
Yearly, by an independent firm. A summary is available.
Where is data processed?
In the region you choose: EU, US or Gulf.
Do you offer a BAA?
Yes, on Enterprise plans.