Trust Center.
Security & compliance.

SOC 2 Type I — on our roadmap, not yet certified. ISO 27001 (in progress). GDPR-aligned; independent assessment not yet completed. Vanta automated compliance. All data encrypted AES-256 at rest, TLS 1.3 in transit.

• Live system status → API and database, polled in real time
• Data Processing Agreement → including the current sub-processor list
• Privacy policy → what we collect, and how long we keep it
• Security practices →
• Report a vulnerability → security.txt