Customer data is hosted in your chosen region (US, EU, MENA, or APAC). All traffic uses TLS 1.2+; data at rest is encrypted with AES-256. The platform is SOC 2 Type II, ISO 27001, and GDPR compliant. Penetration tests are run twice a year and the report is shareable under NDA.
