Compliance & Certifications
Meeting the highest standards for data protection and regulatory compliance.
Certifications & Standards
SOC 2 Type II
Audited for security, availability, and confidentiality controls.
GDPR
Compliant with EU General Data Protection Regulation.
CCPA
Compliant with California Consumer Privacy Act.
HIPAA
Healthcare data protection (Enterprise plan only).
Compliance Framework
Data Privacy
- User consent management
- Data subject access requests (DSAR)
- Right to erasure (right to be forgotten)
- Data portability
- Privacy by design
Data Security
- Encryption at rest and in transit
- Access control and authentication
- Audit logging
- Incident response procedures
- Regular security assessments
Operational Controls
- Employee background checks
- Security awareness training
- Vendor risk management
- Business continuity planning
- Change management procedures
Data Processing Agreement
For customers who need a Data Processing Agreement (DPA) for GDPR compliance, we provide a pre-signed DPA that can be downloaded from your account settings or requested from our team.
Sub-Processors
We maintain a list of sub-processors that handle customer data on our behalf. This list is available upon request and customers are notified of any changes.
Data Residency
Enterprise customers can choose their preferred data residency location:
- United States (default)
- European Union
- Asia Pacific (coming soon)
Audit Reports
SOC 2 Type II audit reports are available for Enterprise customers under NDA. Contact our sales team to request access.
Need compliance documentation?
Contact our team for DPA, security questionnaires, or compliance certifications.
Contact Sales