Trust center

Our house is in order.

Everyone selling GRC claims to be compliant. Here is our actual evidence — audited, current, and live.

Evidence

SOC 2 Type II

Audited by Prescient Assurance · FY2025

Download
Evidence

ISO 27001:2022

Certified by BSI · valid through 2027

Download
Evidence

GDPR

DPA, sub-processors, data residency controls

View
Evidence

HIPAA

BAA available for Team and Enterprise

Request
Evidence

Penetration test

Annual, by NCC Group · summary public

Download
Evidence

Data residency

US · EU (Frankfurt) · UK regions

Learn more

Compliance, solved.

Start free. Bring your first framework online in under an hour.