Trust & Compliance
Security Architecture & Certifications
Independent Audit: SOC 2 Type II Certified • ISO/IEC 27001:2022 Compliant
SOC 2 Type II Attestation
Our controls for security, availability, and confidentiality have been independently audited by a leading global accounting firm with zero exceptions noted.
1. Air-Gapped Private VPC Distributions
Our enterprise container artifacts are digitally signed and distributed without third-party external dependencies. System runs entirely within your perimeter without requiring internet access.
2. Encryption & Key Management
All data at rest is encrypted using AES-256-GCM. We support direct integration with hardware security modules (HSM) conforming to FIPS 140-2 Level 3 standards.
3. Continuous Vulnerability Scanning
Our container base images are audited continuously against national CVE databases and automated SAST/DAST pipelines before every release.