Compliance & certifications
ISO/IEC 27001
Certified
Information security management system, independently certified.
SOC 2 Type II
Compliant
Audited controls for security, availability and confidentiality over a period.
Documents & resources
Security Whitepaper
Public
ISO 27001 certificate
Public
Sub-processor list
Public
Data Processing Agreement
Request access
Security FAQ
Where is customer data stored?
Customer data is hosted in the EU and does not leave the EU without your instruction. See our sub-processor list for specifics.
Do you have a vulnerability disclosure programme?
Yes. Researchers can report issues through our Vulnerability Disclosure Policy; we acknowledge reports within one business day.
What is your incident response process?
We follow a documented plan covering detection, containment, eradication, recovery and notification, and we notify affected customers without undue delay.