Security & compliance
Baseline controls and messaging you can extend with your SOC reports, DPAs, and subprocessors list.
Security highlights
Encryption in transit
TLS 1.2+ for all public endpoints with HSTS recommended in production.
Encryption at rest
Database and blob storage encryption using platform-managed keys or CMK.
Access control
Role-based admin patterns, least-privilege service accounts, and break-glass procedures.
Audit logging
Structured application logs with correlation IDs and export to SIEM.
Vulnerability management
Dependency scanning in CI, NuGet audit, and regular patch windows.
Privacy by design
Cookie consent, GDPR pages, and data minimization on lead capture forms.
99.9%
Uptime target
24h
RPO
4h
RTO
Annual
Pen test cadence
Security pages set expectations for enterprise buyers reviewing your product. Start from these placeholders and attach your latest penetration test summary, subprocessor list, and data processing agreement.
Link to /trust and legal routes for GDPR, cookies, and privacy policy. Enable MarketingTrustPages in configuration when you are ready to expose the full trust center.
Request security pack
Contact us for SOC reports and architecture diagrams.