We treat your data like your customer would treat theirs. Encrypted in transit and at rest, accessed only when you ask us to, retained only as long as the law requires.
\nTLS 1.2+ in transit, AES-256 at rest. Keys rotated regularly.
Role-based, least-privilege defaults. SSO supported.
Every action across production logged and exportable.
EU and US options. UK customers can request UK-only residency.
Configurable retention per customer. Deletion within 30 days on request.
SOC 2 Type II and ISO 27001 alignment. Penetration tested annually.