Security · SOC 2
Controls designed to SOC 2
Our controls are designed to the AICPA Trust Services Criteria for security, availability and confidentiality.
Trust Services Criteria
Security
Systems are protected against unauthorised access through access control, encryption, network protections and monitoring.
Availability
The platform is designed for resilience, with monitoring, alerting, backups and tested recovery procedures.
Confidentiality
Customer data is classified, access-restricted and retained only as long as needed, then securely deleted.
How we operate
Change management
Code is reviewed, tested and deployed through a controlled pipeline, with every change traceable.
Access reviews
Access to production systems is least-privilege, logged and reviewed on a regular schedule.
Incident response
A documented process to detect, contain, investigate and communicate security incidents.
Vendor management
Third parties with access to customer data are assessed before onboarding and reviewed regularly.
Ready to take your messaging further
Tell us what you want your customers to be able to do. We’ll scope it with you and help you launch.