Security by Design

Enterprise-Grade
Trust & Security

We protect your operational data with the same rigor you apply to port safety. Built on Tier 1 infrastructure with defense-in-depth security.

All Systems Operational

View Status Page

Platform Core

Active

Web Application

Active

Mobile Services

Active

Connected Workflows

Active

Compliance & Certifications

Our current compliance status and roadmap

Roadmap

SOC 2 Type II

Pursuing SOC 2 Type II certification. Controls are being implemented ahead of formal audit.

Roadmap

ISO 27001

Following ISO 27001 principles as a framework. Formal certification is planned.

In Progress

GDPR

Data privacy principles applied throughout the platform. EU data residency available. Ongoing review to align with GDPR obligations.

Defense in Depth

Our multi-layered security approach protects your data at every level

Infrastructure Security

Hosted on AWS with multi-region availability
DDoS protection via AWS Shield
Web Application Firewall (WAF)
Network isolation via VPC
Automated security patching

Data Protection

AES-256 encryption at rest
TLS 1.3 encryption in transit
Daily encrypted backups
Point-in-time recovery (30 days)
Data residency controls

Access Control

SAML 2.0 & OIDC SSO integration
Multi-factor authentication (MFA)
Role-based access control (RBAC)
Session management & timeout
Secure access token rotation

Monitoring & Detection

24/7 uptime monitoring
Real-time intrusion detection (IDS)
Automated vulnerability scanning
Log aggregation & alerting
Anomaly detection alerts

Compliance & Audit

Annual penetration testing
Continuous compliance monitoring
Vendor risk management
Immutable audit logs
Data processing agreements

Application Security

OWASP Top 10 mitigation
Static & dynamic code analysis
Dependency vulnerability scanning
Secure development lifecycle
Responsible disclosure program

Security FAQ

Common questions about our security practices

Where is my data stored?

By default, data is stored in AWS EU (Frankfurt). Enterprise customers can discuss region options to meet data residency requirements.

How do you handle data retention?

Data is retained according to your subscription tier. Data can be exported at any time in standard formats. Contact us for enterprise retention policy options.

Do you support SSO/SAML?

Yes, we support SAML 2.0 and OIDC for enterprise single sign-on. Integration is available with major identity providers including Okta, Azure AD, Google Workspace, and OneLogin.

How do you handle security incidents?

We have a documented incident response plan. Critical incidents are communicated promptly. We conduct post-incident reviews for significant events.

Can I get a copy of your security documentation?

Yes, we provide security documentation to qualified prospects. Contact our team to request access.

Security Documentation

Legal documents are available online. Additional security documentation available on request.

Web

Security Whitepaper

Request

Data Processing Agreement

Web

Subprocessor List

Request

Need Security Due Diligence?

We complete vendor risk assessments for enterprise customers. Request our full security pack.

Request Security Pack Schedule Security Review

Security by Design

Enterprise-Grade
Trust & Security

We protect your operational data with the same rigor you apply to port safety. Built on Tier 1 infrastructure with defense-in-depth security.

All Systems Operational

View Status Page

Platform Core

Active

Web Application

Active

Mobile Services

Active

Connected Workflows

Active

Compliance & Certifications

Our current compliance status and roadmap

Roadmap

SOC 2 Type II

Pursuing SOC 2 Type II certification. Controls are being implemented ahead of formal audit.

Roadmap

ISO 27001

Following ISO 27001 principles as a framework. Formal certification is planned.

In Progress

GDPR

Data privacy principles applied throughout the platform. EU data residency available. Ongoing review to align with GDPR obligations.

Defense in Depth

Our multi-layered security approach protects your data at every level

Infrastructure Security

Hosted on AWS with multi-region availability
DDoS protection via AWS Shield
Web Application Firewall (WAF)
Network isolation via VPC
Automated security patching

Data Protection

AES-256 encryption at rest
TLS 1.3 encryption in transit
Daily encrypted backups
Point-in-time recovery (30 days)
Data residency controls

Access Control

SAML 2.0 & OIDC SSO integration
Multi-factor authentication (MFA)
Role-based access control (RBAC)
Session management & timeout
Secure access token rotation

Monitoring & Detection

24/7 uptime monitoring
Real-time intrusion detection (IDS)
Automated vulnerability scanning
Log aggregation & alerting
Anomaly detection alerts

Compliance & Audit

Annual penetration testing
Continuous compliance monitoring
Vendor risk management
Immutable audit logs
Data processing agreements

Application Security

OWASP Top 10 mitigation
Static & dynamic code analysis
Dependency vulnerability scanning
Secure development lifecycle
Responsible disclosure program

Security FAQ

Common questions about our security practices

Where is my data stored?

By default, data is stored in AWS EU (Frankfurt). Enterprise customers can discuss region options to meet data residency requirements.

How do you handle data retention?

Data is retained according to your subscription tier. Data can be exported at any time in standard formats. Contact us for enterprise retention policy options.

Do you support SSO/SAML?

Yes, we support SAML 2.0 and OIDC for enterprise single sign-on. Integration is available with major identity providers including Okta, Azure AD, Google Workspace, and OneLogin.

How do you handle security incidents?

We have a documented incident response plan. Critical incidents are communicated promptly. We conduct post-incident reviews for significant events.

Can I get a copy of your security documentation?

Yes, we provide security documentation to qualified prospects. Contact our team to request access.