Security

Security is the whole product.

SOC 2 Type II, GDPR-ready, encrypted at rest and in transit. Independently audited. No exceptions.

SOC 2 Type II

Annually audited by an independent third party. Report available under NDA.

GDPR + CCPA

Full data-subject rights, DPAs available, EU data residency on Enterprise.

Encryption everywhere

AES-256 at rest, TLS 1.3 in transit. Customer-managed keys on Enterprise.

SSO + SCIM

SAML SSO, Okta, Google Workspace, and SCIM provisioning on Team and up.

Audit logs

Full audit trails of every action — exportable to your SIEM.

Region pinning

Pin all data to US-East, EU-West, or AP-Southeast on Enterprise.

Have a security questionnaire?

We answer them fast. SOC 2 report, pen-test summary, and SIG-Lite available under NDA.