Security Controls
View all 37 controlsInfrastructure Security9
Production access restricted to key personnel
Production deployment access restricted
Remote access encrypted
Product Security10
Encryption at rest
Encryption in transit
Encryption key access restricted
Data Handling8
Zero-training policy with AI providers
Automatic PII redaction
EU data residency for primary storage
Operational Security10
Incident response plan documented
Incident management procedures followed
Encrypted offline backups
Subprocessors
View allVendorPurposeData Region
MongoDB, Inc.Primary application database
EU
Redis Ltd.Job queue, caching, and session management
EU
Cloudflare, Inc.CDN, DDoS protection, WAF, DNS, domain management, and object storage (R2)
EU
Stripe, Inc.Payment processing and invoicing
EU
xAI Corp.AI model inference for vulnerability analysis
US