Security &
Compliance

Military-grade encryption. GDPR-aligned processing. Secure by design.

Request a PDA

Secure by default. Encryption at rest and in transit.

Privacy by design. GDPR-aligned processing and data-subject workflows.

Least privilege. Role-based access with auditability.

Reliability. Real-time monitoring, retries, and rollbacks — always on, always in sync.

Wat we
commit to

Wat we commit to

Security isn’t a feature we add on top — it’s the foundation we build on. Every part of our platform is designed with protection, privacy, and reliability at its core. From encryption standards to access controls, from monitoring to data rights, we hold ourselves accountable to practices that are not only compliant but resilient and transparent.

Here's what that means in practice:

Encryption — TLS 1.2+ in transit, AES-256 at rest.

Access control — least-privilege RBAC, SSO-ready, audited changes.

Monitoring — health checks, queue depth, lag KPIs, automatic retries.

Reliability — designed for 99.99% uptime.

Data requests — export & deletion (DSAR) supported.

Encryption

Protecting your data starts with strong encryption. We secure every connection and every piece of stored information using industry-leading standards. Keys are carefully managed and rotated on schedule, so your data stays protected at all times — in motion and at rest.

In transit: TLS 1.2+ for all external connections.

At rest: AES-256 encryption for databases and backups.

Keys: Managed and rotated on a defined schedule.

Privacy & GDPR

We design our platform with privacy at its core. From data processing agreements to international transfers, every workflow aligns with GDPR requirements. We give customers control over their data with clear rights, configurable retention, and transparent processes that put compliance into practice.

In transit: TLS 1.2+ for all external connections.

At rest: AES-256 encryption for databases and backups.

Keys: Managed and rotated on a defined schedule.

Event-Driven Sync

Our approach to data emphasizes clarity, control, and resilience—covering data flows, storage regions, and backup practices.

Data maps: what we ingest, store, process, and emit (high-level).

Residency: region-aware storage options (document your current choices).

Backups: encrypted, with tested restores on a regular cadence.

Reliability & monitoring

Our platform is built for consistency and resilience, with deep observability and uptime at the core.

Event-driven sync + reconciliation — always on, always in sync.

Observability — live dashboards for lag, failures, queue depth.

Resilience — idempotent writes, safe retries, controlled rollbacks.

Transparancy

We commit to open, honest communication about our security posture, sharing only what’s real and always accessible.

No badge theatre. We publish only what’s real.

Docs by request: DPA, sub-processors list, and answers for security reviews (under NDA if needed).

Access & controls

We secure access through least-privilege principles, enterprise integrations, and full visibility into critical actions.

RBAC with least-privilege defaults.

SSO for enterprise identity providers.

Audit logs for admin actions and key events.

Incident Management

We have clear processes to detect, respond to, and learn from security incidents, ensuring timely action and accountability.

Detection & response runbooks with otn-call rotation.

Customer notifications for security incidents.

Post-incident reviews with corrective actions.

Privacy & GDPR
Our approach to data emphasizes clarity, control, and resilience—covering data flows, storage regions, and backup practices.
Data maps: what we ingest, store, process, and emit (high-level).
Residency: region-aware storage options (document your current choices).
Backups: encrypted, with tested restores on a regular cadence.
Reliability & monitoring
Our platform is built for consistency and resilience, with deep observability and uptime at the core.
Event-driven sync + reconciliation — always on, always in sync.
Observability — live dashboards for lag, failures, queue depth.
Resilience — idempotent writes, safe retries, controlled rollbacks.
Transparancy
We commit to open, honest communication about our security posture, sharing only what’s real and always accessible.
No badge theatre. We publish only what’s real.
Docs by request: DPA, sub-processors list, and answers for security reviews (under NDA if needed).
Access & controls
We secure access through least-privilege principles, enterprise integrations, and full visibility into critical actions.
RBAC with least-privilege defaults.
SSO for enterprise identity providers.
Audit logs for admin actions and key events.
Incident Management
We have clear processes to detect, respond to, and learn from security incidents, ensuring timely action and accountability.
Detection & response runbooks with otn-call rotation.
Customer notifications for security incidents.
Post-incident reviews with corrective actions.