All infrastructure and sub processors used are ISO 27001 and SOC 2 Type 2 compliant.
SOC 2 - Type II audit nearing completion. Expected mid-February 2026. Our systems and processes are designed to meet rigorous standards for security, availability, and confidentiality.

We are fully compliant with the General Data Protection Regulation (GDPR). User data is processed lawfully, transparently, and for a specific purpose. Our infrastructure is designed for privacy-first handling of personal data.

Your data is encrypted both at rest and in transit using industry-standard AES-256 encryption.
We monitor our systems around the clock for security threats and unusual activity.
Third-party security experts regularly test our systems for vulnerabilities.
Your data stays private and will not be used to train any AI models.
We offer SSO and SAML support, Multi-factor authentication and Role-based access control.
We are GDPR compliant and have DPAs available for enterprise customers.
