Security Controls
View all 37 controlsData Handling8
Zero-training policy with AI providers
EU data residency for primary storage
Automatic PII redaction
Product Security10
Encryption at rest
Encryption in transit
No raw credentials in client state
Infrastructure Security9
Network segmentation enforced
DDoS and WAF protection
Production access restricted to key personnel
Operational Security10
Signed DPAs with all sub-processors
Incident response plan documented
Incident management procedures followed
Subprocessors
View allVendorPurposeData Region
Google CloudAI model inference for vulnerability analysis, confidential sandboxes, cloud hosting
EU
dataforest GmbHCloud Hosting Provider
EU
MongoDB, Inc.Primary application database
EU
Redis Ltd.Job queue, caching, and session management
EU
Cloudflare, Inc.DDoS protection, WAF, domain management, and object storage (R2)
EU