Approved answer library
Your source of truth. Only approved answers are reused automatically.
Do you have a SOC 2 Type II report?
Approved
Yes. Our most recent SOC 2 Type II report covers Security, Availability, and Confidentiality.
SOC 2
Audit
Used 142× · Sep 12Is data encrypted in transit?
Approved
All data in transit is encrypted with TLS 1.2+ with modern cipher suites; HSTS is enforced.
Encryption
Used 128× · Aug 30Do you perform annual penetration tests?
Approved
Yes, by an independent CREST-accredited firm annually and after major releases.
Testing
Used 97× · Sep 2Where is customer data hosted?
Approved
AWS us-east-1 and eu-central-1, with region selected per customer contract.
Hosting
Privacy
Used 88× · Jul 19Do employees receive security awareness training?
Approved
All employees complete training at onboarding and annually, plus monthly phishing simulations.
People
Used 76× · Sep 20Do you have a vulnerability disclosure program?
Approved
Yes, a public VDP with safe harbor and a private bug bounty.
Testing
Used 41× · Jun 4