Security

SOC 2
We are in the process of becoming SOC 2 certified, with full certification expected by March 2025.

GDPR
We comply with European privacy regulations and have implemented robust measures to protect personal data.

ISO 27001
We are in the process of becoming ISO 27001 certified, with full certification expected by May 2025.

CCPA
We are working towards full compliance with the CCPA, with full compliance expected by August 2025.

Edge Security
We use advanced firewall protection and DDoS mitigation to prevent attacks before they can reach the platform.

Application Security
Secure development practices, regular security testing, and vulnerability scanning ensure that our applications remain secure.

Data Encryption
Only authorised users can access sensitive data. We use AES-256 encryption for data at rest and TLS 1.2+ for data in transit.

Access Management
We require multi-factor authentication (MFA) and employ role-based access control (RBAC) to ensure users are granted access only to the data they are authorised for.

SOC 2 *
We continuously scan the platform 24/7 for any signs of malicious activity leveraging AWS and GCP's extensive monitoring systems.