shield_lock Security

Security you can hand to
your CISO on call one.

Certified, isolated and designed for regulated financial workloads — from tenant separation and encryption to SSO, SCIM and audit-ready evidence.

Independently audited & certified

Platform pillars

Six controls, one platform.

The controls your risk, legal and security teams ask for on day one — built into the platform, not bolted on.

verified_user

Annual third-party audits with continuous control monitoring. Full reports and letters of attestation available under NDA.

lock

TLS 1.2+ in transit and AES-256 at rest with per-tenant key isolation. Customer-managed keys available on enterprise plans.

key

SAML and OIDC single sign-on, SCIM 2.0 provisioning, and role-based access down to the workflow and step level.

dns

Logical isolation by default. Dedicated infrastructure available for regulated customers with strict segregation requirements.

public

Pick a region and processing is enforced end-to-end. GDPR-native by default, with a DPA and sub-processor list on request.

receipt_long

Immutable audit logs, IP allow-listing, session controls and one-click evidence exports for regulator and internal audit.

The security pack

Skip the six-week questionnaire loop. Our security pack is written for CISO, DPO and procurement reviewers — one download, one signature.

check_circle
SOC 2 Type II report
Latest audit period, under NDA.
check_circle
ISO 27001 certificate
Current scope, issued by our third-party auditor.
check_circle
Penetration test summary
Executive summary of the most recent third-party pen test.
check_circle
Sub-processor list & DPA
GDPR-ready Data Processing Agreement and current sub-processors.
check_circle
Architecture & data-flow diagrams
How tenant data moves through the platform and where it lives.

Book a working session with our team — bring your questionnaire, leave with signed answers and a scoped pilot plan.