Overview
Acme Analytics provides real-time product analytics for SaaS teams. This page summarizes how we protect customer data and run our security program.
Infrastructure & hosting
Our application and data are hosted on major cloud providers in the United States. Production is isolated from development and staging, with infrastructure managed as code.
Data protection
All customer data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256. Backups are encrypted and tested regularly.
Access & authentication
We enforce role-based access control across all systems. Single sign-on (SSO) and multi-factor authentication (MFA) are required for all staff, and access is reviewed on a recurring basis.
Subprocessors
We use a small set of vetted subprocessors for hosting, email, and payment processing. A current list is available on request.
Compliance
We are pursuing SOC 2 Type II and align our controls to the CIS Critical Security Controls. Our security program is reviewed at least annually.
Incident response
We maintain a documented incident response plan. In the event of a security incident affecting customer data, we notify affected customers without undue delay.
Contact
Security questions? Reach our team at [email protected].