Trust Center

Certifications, controls, and live status. Anything in progress is labeled in progress; diligence teams get timelines and evidence on request.

Certifications

• SOC 2 Type II

  In progress

  Observation period running; per-control status on request.

• ISO 27001

  In progress

  Stage 1 readiness; timeline on request.

• GDPR

  Operational

  Versioned DPA, subprocessor list, subject rights via export plus erasure.

Controls

• SSO and SCIM

  SAML 2.0 plus OIDC, SCIM lifecycle with group push, enforced MFA with step-up.

• Audit trail

  Append-only hash-chained log with CSV, API, and SIEM export shapes.

• Data residency

  Region-pinned hosting with EU option; AES-256 at rest, TLS 1.3 in transit.

• Retention and legal hold

  Configurable retention with purge queue; holds exempt from purge.

• Uptime

  Numeric reporting with service credits; live numbers on the status page.