Security

Compliance-grade by default.

SOC 2 Type II, GDPR, and an architecture designed for regulated industries.

SOC 2 Type II
GDPR
ISO 27001 (in progress)
HIPAA-ready

Encryption

AES-256 at rest, TLS 1.3 in transit, customer-managed keys available.

Access control

SSO via SAML, role-based permissions, IP allow-listing.

Audit logging

Every action logged. Exportable to your SIEM in real time.

Data residency

US, EU, and APAC regions. You choose where data lives.

Isolated tenants

Logical isolation for shared cloud, dedicated for enterprise.

Penetration tested

Third-party pen tests yearly. Report on request.

Need a vendor questionnaire?

We complete most standard security questionnaires within 5 business days.