Security & Trust

Enterprise-grade security you can trust

Your data is protected by industry-leading encryption, strict access controls, and compliance certifications. No compromises.

AES-256

Encryption at rest

TLS 1.3

Encryption in transit

99.9%

Uptime SLA (HQ)

Data residency

How We Protect Your Data

Security at every layer — from data residency to access controls.

AES-256 encryption at rest and TLS 1.3 in transit. Your data is protected at every layer.

All data hosted in europe-west1 (Belgium). Cloud SQL with automated daily backups and point-in-time recovery.

Google and Microsoft SSO on Command+. Automated user provisioning via SCIM/SAML on HQ plan.

Four role levels (Super Admin, Comms Admin, Space Admin, Employee) with granular permission controls.

Every action logged with timestamp, user, and context. Tamper-proof, append-only on HQ plan.

Data subject access requests, right to erasure, and data portability built into the platform.

Security

SOC 2 Type II (in progress)GDPR CompliantPOPIA CompliantISO 27001 RoadmapAnnual Penetration TestingResponsible Disclosure Policy

HostingGoogle Cloud Platform — Firebase + Cloud Run, europe-west1 region

DatabaseCloud SQL (PostgreSQL 17) with automated daily backups, 7-day retention

AuthFirebase Authentication with custom claims for multi-tenant RBAC

StorageFirebase Storage with per-tenant isolation and encryption

CDNGoogle Cloud CDN for static assets with global edge caching

MonitoringCloud Monitoring + Error Reporting with real-time alerting

Contact our team for a detailed security review or to request our SOC 2 report.

Last reviewed: March 2026