Trust Center

Security you can verify

We’re a security company. That means we hold ourselves to the same standards we help you achieve. Here’s everything you need to know about how we protect your data.

Our commitments

What we promise

Security by design

Security isn't an afterthought—it's built into every feature from day one.

Your data stays yours

We never sell your data. We never use it to train AI models. Period.

Enterprise-grade infrastructure

Hosted on Google Cloud Platform, which operates under SOC 2, ISO 27001, ISO 27017, ISO 27018, and PCI DSS attestations for its infrastructure. Data encrypted in transit (TLS 1.3) and at rest (AES-256). Logical isolation per customer tenant.

We walk the walk

We use vCISO Lite to manage our own compliance program. If it's good enough for us, it's good enough for you.

We eat our own dog food

vCISO Lite isn’t just something we sell — it’s the platform we use to run our own security program. Every policy we publish, every gap analysis we run, and every piece of audit evidence we’ll hand to our SOC 2 auditor was generated in vCISO Lite. We use the product the same way you will.

Building a security program in public is uncomfortable. It’s also the honest way to do it. See exactly where we are on our certification journey, what we’re pursuing, and what you can verify today.

See our compliance journey
vC

Managed with vCISO Lite

Questions about security?

Our security team is happy to answer questions, provide documentation, or schedule a call to discuss your specific requirements.