Security and privacy, by default.
SOC 2 Type II, GDPR, AES-256 at rest and TLS 1.3 in transit. Data in the EU. Contract legal review.
Controls and certifications
SOC 2 Type II
Annual independent audit. Report available under NDA.
GDPR compliantAssigned DPO, signable DPA, subject rights fulfilled in under 30 days.
Encryption
AES-256 at rest, TLS 1.3 in transit. Keys managed via HSM.
EU data residencyVercel Enterprise EU infrastructure. No replication outside EU without consent.
Full audit trail
Every action logged: user, IP, timestamp, responsible agent. Exportable.
Backups + DRDaily encrypted backups. RPO 1h, RTO 4h. Tested disaster recovery plan.
Need technical details for your security team?
We share the SOC 2 Type II report under NDA. We can also sign a DPA and review contract clauses.
SOC 2 Type II · GDPR · Data residency EU