Trust Center

Built for Security, Compliance, and Transparency

AT A GLANCE

1. In-Depth Security Program: A multi-layered approach encompassing network security, application security, and rigorous internal policies and procedures to safeguard company and client data.
2. Comprehensive Data Encryption: All customer data is encrypted in transit using TLS and at rest through cloud provider native encryption mechanisms.
3. Principle of Least Privilege: Access is strictly role-based, ensuring personnel only have the tools, resources, and environments necessary for their responsibilities.
4. Independent Testing & Compliance: Annual third-party penetration testing and compliance certifications, complemented by continuous vulnerability scanning and remediation.
5. Continuous Monitoring & Incident Response: Real-time security monitoring, automated alerts, and a well-defined incident response plan to quickly detect, contain, and remediate threats.
   
   

SECURITY CERTIFICATIONS

SECURITY PRACTICES

Identity & Access

• SSO/SAML, SCIM (user lifecycle), MFA enforced for internal staff.
• Customer access uses cloud-native IAM with least-privelege managed policies.
• Priveleged access via JIT approvals & session recording.

Data Protection

• No customer PII required for optimization; we operate on configuration, usage, and cost metadata.
• KMS-backed encryption at rest; TLS 1 2+ in transti.
• Secrets managed in HSM-backed stores (eg., AWS, Secrets Manager)

Application & SDLC

• Secure SDLC with SAST/DAST, dependency scanning (SCA), IaC policy checks (OPA).
• Change management with CI/CD approvals, 4-eyes code reviews.

Platform & Infrastructure

• Network segmentation, private subnets, restricted egress.
• Hardening baselines (CIS where applicable), automated drift detection.
• Continuous monitoring: logs, metrics, audit trails retained per policy.
  
  

POLICIES & DOCUMENTATION

To ensure transparency and help you understand how we protect your data, we provide full access to our legal, security, and privacy commitments.

• Privacy Policy: Learn how we collect, use, store, and safeguard personal data across our platform. 
  
  
• Terms & Conditions : Review the terms, responsibilities, and conditions that govern the use of our products and services.
  
  
• Security : Explore our detailed security practices, technical controls, and measures designed to protect customer data.