🏆

SOC 2 Type II

Independently audited and certified for security, availability, and confidentiality.

🏥

HIPAA Compliant

BAA available for healthcare organizations handling protected health information.

🌐

ISO 27001

Certified information security management system meeting international standards.

Our security practices

🔐 Encryption

All data is encrypted at rest using AES-256 and in transit using TLS 1.3. Encryption keys are managed via AWS KMS with automatic rotation.

🔑 Access Control

Role-based access control (RBAC) with SSO/SAML support. All access is logged and auditable. Principle of least privilege enforced.

🏗️ Infrastructure

Hosted on AWS with multi-AZ redundancy. Network isolation via VPCs. Regular penetration testing by third-party security firms.

📋 Data Handling

GDPR compliant data processing. Data residency options available (US, EU, APAC). Configurable data retention policies.

🐛 Vulnerability Management

Continuous vulnerability scanning. Responsible disclosure program with bug bounty. 24-hour SLA for critical vulnerabilities.

Have security questions?

Our security team is happy to discuss our practices, provide documentation, or complete your security questionnaire.

Contact Security Team