Security

Data Encryption

All data is encrypted at rest and in transit using industry-leading standards.

encrypted
storage

Encryption at Rest

AES-256 encryption for all stored data, including databases and backups

AES-256
sync_lock

Encryption in Transit

TLS 1.3 enforced on all connections — plaintext HTTP is rejected

TLS 1.3
key

Key Management

Encryption keys managed via Hardware Security Modules (HSM) with automatic rotation

HSM

Access Control & Authentication

Multi-layered access controls to ensure only authorized users can access your data.

admin_panel_settings
phonelink_lock

Multi-Factor Authentication (MFA)

TOTP-based MFA available for all accounts; enforced for admin-level access

Available
badge

Role-Based Access Control (RBAC)

Granular permissions per role; principle of least privilege applied throughout

Enforced
verified_user

Single Sign-On (SSO)

SAML 2.0 and OAuth 2.0 / OpenID Connect support for enterprise identity providers

SAML 2.0
manage_history

Session Management

Automatic session expiry, concurrent session limits, and full audit trail of logins

Active

Compliance & Certifications

We meet the highest international standards for data security and privacy.

workspace_premium
SOC 2 Type II Certified Annual third-party audit covering security, availability, and confidentiality
GDPR Compliant EU data subject rights, DPA available, data processing agreements in place
ISO 27001 Aligned Information security management system following ISO/IEC 27001:2022 controls
CCPA Compliant California Consumer Privacy Act — opt-out, deletion, and portability rights supported
Penetration Testing Annual Independent security penetration tests conducted annually by accredited third parties

Infrastructure & Operational Security

Enterprise-grade cloud infrastructure with continuous monitoring and incident response.

cloud_done
security

DDoS Protection

Always-on DDoS mitigation with automatic traffic scrubbing at network edge

Active
monitoring

24/7 Security Monitoring

Real-time threat detection with automated alerting and a dedicated incident response team

24/7
backup

Automated Backups & Disaster Recovery

Daily encrypted backups with geo-redundant storage; RTO < 4 hours, RPO < 1 hour

Daily
hub

Network Isolation

VPC with private subnets, WAF, and zero-trust network access for all internal services

Zero Trust