Security and Compliance

Compliance posture

This page summarizes current posture and known buyer diligence answers.

Current posture summary

SOC 2 Type 2

In progress. Current target completion window: Q4 2026.

ISO 27001

Planned after SOC 2 control baseline stabilization. Roadmap publication target: Q1 2027.

GDPR DPA

Draft DPA package is available on request during procurement and legal review.

Sub-processors

Sub-processor disclosures are provided during diligence and updated per contract terms.

Data residency

US and EU deployment options are supported depending on selected hosting topology.

Breach notification

Security incident notifications target a 72-hour maximum initial notice window.