Compliance & reports

Our compliance posture and the documentation available to customers and prospects.

SOC 2 Type II

In progress

Independent audit of our security, availability, and confidentiality controls over time. In progress; report available under NDA once complete.

GDPR

Aligned

We support GDPR obligations for EU personal data, including a Data Processing Agreement, sub-processor transparency, and data-subject request handling.

CCPA

Aligned

We support California Consumer Privacy Act requirements for the personal information we process on our customers' behalf.

Documents

SOC 2 Type II Report

Available under NDA once the current audit completes.

Coming soon

Penetration Test Summary

Executive summary of our most recent third-party penetration test, under NDA.

Data Processing Agreement (DPA)

Our standard DPA with EU SCCs and UK IDTA. No NDA required.

Sub-processor list

The third parties we use to deliver the service. No NDA required.

Privacy Policy

How we handle personal data. No NDA required.