Compliance & Security

We take data protection and security seriously. Learn about our compliance certifications, security practices, and commitment to protecting your information.

Certifications & Compliance

SOC 2 Type II

Certified

Security, availability, and confidentiality controls

Valid until: December 2024

GDPR Compliant

Compliant

European data protection regulation compliance

Valid until: Ongoing

CCPA Compliant

Compliant

California Consumer Privacy Act compliance

Valid until: Ongoing

ISO 27001

In Progress

Information security management system

Valid until: Q2 2025

Data Handling Practices

Data Collection

  • Only collect data necessary for service functionality
  • Clear consent mechanisms for all data collection
  • Regular audits of data collection practices
  • Minimal data retention policies

Data Storage

  • End-to-end encryption for all stored data
  • Geographically distributed backup systems
  • Regular security assessments of storage infrastructure
  • Automated data lifecycle management

Data Processing

  • Purpose limitation - data used only for stated purposes
  • Data minimization in all processing activities
  • Regular deletion of unnecessary data
  • Audit trails for all data processing activities

Data Sharing

  • No data sharing without explicit user consent
  • Strict vendor agreements for third-party processors
  • Regular assessment of data sharing practices
  • Transparent reporting of data sharing activities

Security Measures

We implement industry-leading security practices to protect your data and ensure platform reliability.

Encryption

AES-256 encryption for data at rest and TLS 1.3 for data in transit.

Access Control

Multi-factor authentication and role-based access controls.

Monitoring

24/7 security monitoring and automated threat detection.

Compliance Documents

Data Processing Agreement (DPA)

Comprehensive agreement outlining how we process and protect your data

Last updated: January 2024

Security Whitepaper

Detailed overview of our security architecture and practices

Last updated: December 2023

Compliance Report

Annual compliance report covering all certifications and audits

Last updated: January 2024

Incident Response Plan

Our procedures for handling security incidents and data breaches

Last updated: November 2023

Questions About Compliance?

Our compliance team is here to answer any questions about our security practices, certifications, or data handling procedures.