Enterprise-grade security.
No compromises.
Your company's data is your most valuable asset. We treat security as a core product requirement — not an afterthought. Here's exactly how we protect it.
Certified and compliant
SOC 2 Type II
Independently audited annually for security, availability and confidentiality controls.
ISO 27001
Certified information security management system, reviewed every year.
GDPR
Full compliance with EU data protection regulations. DPA available on request.
HIPAA Ready
Healthcare-grade data handling with BAA available for Enterprise customers.
CCPA
California Consumer Privacy Act compliant with full data portability support.
PCI DSS
Payment data handled through PCI-compliant processors. No card data stored.
Built secure from the ground up
End-to-end encryption
- AES-256 encryption at rest for all stored data
- TLS 1.3 in transit — no exceptions
- Encryption keys managed with AWS KMS
- Zero-knowledge architecture for sensitive fields
Access control
- Role-based access control (RBAC) at user and team level
- SSO support via SAML 2.0, Okta, Azure AD, Google Workspace
- Multi-factor authentication required for all accounts
- Session management with configurable timeout policies
Infrastructure
- Hosted on AWS with multi-region redundancy
- 99.9% uptime SLA with real-time status page
- Automated daily backups with 30-day retention
- DDoS protection and Web Application Firewall
Audit & compliance
- Full audit logs for every query, action and login
- Logs exportable in standard formats (JSON, CSV)
- Configurable data retention policies
- Right-to-delete tooling for GDPR compliance
Deploy where you need to
Cloud
Fully managed on AWS. SOC 2 certified. Best for most teams. Up and running in minutes.
Private Cloud
Dedicated infrastructure in your preferred region. Full isolation from other customers.
On-Premise
Deploy entirely within your own infrastructure. Complete data sovereignty. Docker-based.
Have security questions?
Our security team is happy to answer questions, complete your vendor questionnaire, or set up a technical deep dive.