Security
Security, built for regulated workloads.
A pragmatic look at our certifications, controls, and disclosure process. Customer security reviews welcome — request the trust report from your account team.
Certifications
SOC 2 Type II
Audited annually against the Trust Services Criteria.
ISO/IEC 27001
Certified information security management system.
iBeta PAD Level 2
Presentation Attack Detection certification for liveness.
GDPR & UK GDPR
Documented controls and a published DPA.
Operational controls
Encryption
AES-256 at rest, TLS 1.3 in transit, customer-managed keys on Enterprise.
Access control
Role-based access, least-privilege defaults, just-in-time elevation with audit.
Monitoring
24×7 SOC, SIEM correlation, anomaly detection, and incident response runbooks.
Vulnerability management
Continuous scanning, third-party pen tests at least annually, and a public disclosure policy.