We maintain the highest standards of security and compliance to protect your data and meet regulatory requirements.
We maintain compliance with major security standards and regulations
Independent audit of security, availability, and confidentiality controls
Full compliance with EU General Data Protection Regulation
California Consumer Privacy Act compliance for US users
International standard for information security management
Healthcare data compliance available for enterprise customers
Family Educational Rights and Privacy Act compliance
How we protect your data every day
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Encryption keys are managed using industry-standard key management services.
Role-based access control with principle of least privilege. Multi-factor authentication required for all internal systems.
Clear data retention policies with automatic purging. Users can request data deletion at any time.
All third-party vendors undergo security assessments. We maintain a limited number of sub-processors.
24/7 security monitoring with documented incident response procedures. Customers notified within 72 hours of any breach.
All employees complete annual security awareness training. Background checks required for all staff with data access.
Third-party services that process data on our behalf
Enterprise customers can request our standard Data Processing Agreement (DPA) for GDPR and other regulatory compliance.
Our security and compliance team is available to answer your questions and provide documentation.
[email protected]