Security
Security is architected into our platform from the ground up — encryption, access control, hardened infrastructure, and continuous monitoring.
All data is encrypted using AES-256 encryption both in transit and at rest. Our encryption keys are managed through industry-standard key management systems with regular rotation.
All communications between your systems and our platform use the latest TLS 1.3 protocol, ensuring maximum security for data transmission.
Manufacturing data stored in our databases is encrypted at the field level, providing an additional layer of protection for sensitive information.
All user accounts require multi-factor authentication (MFA) using TOTP, SMS, or hardware security keys to prevent unauthorized access.
Granular permission systems ensure users only have access to the data and features necessary for their role within your organization.
Secure session handling with automatic timeout, session invalidation, and protection against session hijacking attacks.
Our infrastructure runs on enterprise-grade cloud platforms that hold SOC 2 Type II attestations, providing robust physical and network security.
Production systems are isolated in secure network segments with strict firewall rules and intrusion detection systems.
Third-party security audits and penetration testing are conducted quarterly to identify and address potential vulnerabilities.
Continuous monitoring of all systems with real-time threat detection and automated incident response capabilities.
Comprehensive logging of all system activities, user actions, and data access with tamper-proof log storage and retention.
Machine learning-powered anomaly detection systems identify unusual patterns and potential security threats in real-time.
Standards & Compliance
SOC 2 Type II
Controls built to SOC 2 security, availability, and confidentiality criteria
On Our Roadmap
ISO 27001
Security management practices modeled on the international ISMS standard
On Our Roadmap
NIST SP 800-171
Controls modeled on NIST guidance for controlled unclassified information
Aligned by Design
GDPR
Data handling designed around European data protection principles
Aligned by Design
Reach out to discuss security requirements, report a concern, or request more detail on our practices.