Security
Built for trust.
SOC 2 in progress, GDPR + CCPA compliant, AES-256 at rest, TLS 1.3 in transit. The full security overview is below.
On this page
- Encryption — AES-256 at rest, TLS 1.3 in transit, key rotation every 90 days
- Access controls — SSO + SCIM provisioning on Studio plan, role-based permissions everywhere
- Audit logs — every meaningful action logged for 365 days, exportable as JSON
- Backups — point-in-time recovery for 35 days, cross-region replication
- Penetration testing — annual third-party pen test, latest report available under NDA