Trust portal

The packet your security team actually wants.

SOC 2, pen test, CAIQ, SIG, insurance certificate, subprocessors, and uptime — all in one portal. NDA-gated documents unlock with a one-click request.

Certifications

The paperwork your buyers expect.

SOC 2 Type II

GDPR

HIPAA BAA

ISO 27001 (target)

CCPA / CPRA

21 CFR Part 11

Controls

What's actually in the box.

Encryption

AES-256 at rest, TLS 1.3 in transit. Per-tenant key isolation on Enterprise.

Identity

SSO/SAML, SCIM, enforced MFA, IP allow-lists, hardware key support.

Infrastructure

Multi-AZ on AWS, RPO 5 min, RTO 1 hr, 35-day backup retention.

Data residency

US or EU at workspace creation. Audit-grade enforcement of region pinning.

Access controls

Least-privilege engineering access, reviewed quarterly, audited via internal AuthZ.

Audit logging

Every action written immutably; exportable via API or streamed to SIEM.

Reports

Pull the document, send it to your team.

Need something specific?

Real humans answer. Same-day on most requests.

Talk to the security team