Enterprise security for the infrastructure you can't afford to lose.
The platform is built with enterprise security at its core. We're actively working toward formal SOC 2 Type II certification, targeted for Q4 2026. In the meantime, we operate to SOC 2 controls and are happy to walk through your security questionnaire line-by-line.
Data protection your IT and security teams can defend.
Real practices, in production today, not aspirational certifications on a slide.
Authentication & Access
MFA, SSO (SAML / OIDC), Active Directory integration, and 19 granular RBAC permission levels for enterprise access control.
Encryption
TLS 1.3 in transit with strong cipher suites. AES-256 at rest for sensitive data. Key rotation on a cadence.
Audit & Compliance
Complete audit trail with user attribution, timestamps, and IP logging. Configurable password policies and retention windows for regulatory compliance.
Flexible Deployment
Cloud hosting on AWS, Azure, or GCP with autoscaling. On-premise options available for data sovereignty and air-gap requirements.
SOC 2 Type II: Q4 2026 target.
We don't claim certifications we don't have. We do operate to the controls today.
The certification will validate our commitment to security, availability, processing integrity, confidentiality, and privacy. Until then, we implement security controls aligned with SOC 2 requirements and provide detailed responses to security questionnaires on request.
Current Security Practices
- Regular security assessments and vulnerability scanning
- Secure software development lifecycle (SDLC)
- Employee security awareness training
- Incident response procedures with on-call rotation
- Data backup and disaster recovery planning
- Access control reviews and privilege management
Have Security Questions?
Our team is ready to discuss your specific security requirements, walk through your questionnaire, and provide documentation about our practices. Most security reviews complete in two to four weeks.
Standard available artifacts include: architecture diagrams, data-flow diagrams, network diagrams, encryption design, access control policy, incident response plan, BCP/DR runbooks, and vendor due-diligence package.
Contact for Security DetailsRun it in your environment.
Cloud, on-prem, or hybrid. Your security team holds the keys. Your data never leaves your boundary unless you say so.
Cliffhanger Solutions
Get a Demo