Your data stays yours, and stays safe
Your data security is our top priority. We implement enterprise-grade security measures to protect your information at every level.
SOC 2 Type II
GDPR compliant
CCPA compliant
ISO 27001
Built in
Enterprise-grade security
Built from the ground up with security in mind.
Encryption at rest and in transit
All data is encrypted using AES-256 at rest and TLS 1.3 in transit. Your emails and contact data are protected at every stage.
SOC 2 Type II certified
We undergo annual audits to ensure our security controls meet the highest standards. Our SOC 2 report is available upon request.
24/7 security monitoring
Our security team monitors for threats around the clock. Automated alerts and manual reviews ensure rapid incident response.
Role-based access control
Fine-grained permissions let you control who can access what. Audit logs track every action for complete visibility.
Practices
Security across every layer
What we do day to day, grouped by where it applies.
Infrastructure
- Hosted on AWS with multi-region redundancy
- Automatic daily backups with 30-day retention
- DDoS protection and Web Application Firewall
- Regular penetration testing by third parties
- Infrastructure as Code with version control
Application security
- Secure software development lifecycle (SSDLC)
- Regular dependency vulnerability scanning
- Code reviews for all production changes
- Automated security testing in CI/CD pipeline
- Bug bounty program for responsible disclosure
Data protection
- Data minimization and purpose limitation
- Automatic data retention policies
- Secure data deletion upon request
- Customer data isolation and segregation
- No third-party data sales, ever
Access control
- Single Sign-On (SSO) support
- Multi-factor authentication (MFA)
- IP allowlisting for enterprise accounts
- Session management and timeout controls
- Comprehensive audit logging
FAQ
Security questions
Short answers to what security teams ask us most.
Have security questions?
Our security team can help with assessments, compliance documentation, or a vulnerability report.