Comprehensive audit of security, availability, processing integrity, confidentiality, and privacy controls.
Annual penetration testing
Vulnerability scanning and remediation
Incident response procedures
Change management processes
Full compliance with European data protection regulations for user privacy and data rights.
Data portability via GitOps exports
Right to deletion (30-day purge)
Data processing agreements available
EU data residency options (Enterprise)
California Consumer Privacy Act compliance for transparency and user control.
Do Not Sell My Data honored
Disclosure of data collection practices
Opt-out mechanisms for analytics
Annual privacy audit reports
Business Associate Agreements (BAA) for healthcare organizations handling PHI.
Signed BAA required before PHI processing
Encryption of PHI at rest and in transit
Access controls and audit logs
Breach notification procedures
ISO 27001 (Security Management) - Planned 2026
ISO 27017 (Cloud Security) - Planned 2026
ISO 27018 (Cloud Privacy) - Planned 2026
PCI DSS (Payment Card Industry) - Stripe handles payments
Enterprise customers can request custom Data Processing Agreements (DPA), Business Associate Agreements (BAA), or compliance reports.
Contact Compliance Team