Compliova Trust Center
Independent verification of how Compliova protects your data, maintains security controls, and upholds our compliance commitments.
Compliance Posture
Certifications & Standards
ISO 27001:2022
Information Security Management System — actively implementing all Annex A controls.
SOC 2 Type II
Trust Services Criteria for Security, Availability, and Confidentiality.
GDPR
Data processing agreements, privacy notices, and subject-access request procedures in place.
How We Protect Your Data
Security Practices
Encryption at Rest & in Transit
All customer data is encrypted using AES-256 at rest and TLS 1.3 in transit. Encryption keys are managed via KMS.
Role-Based Access Control
Every user action is scoped by their tenant, role, and permission set. Database-level Row Level Security (RLS) enforces tenant isolation independently of the application layer.
Vulnerability Management
Continuous dependency scanning, quarterly penetration testing by external assessors, and 24-hour SLA for critical CVEs.
Incident Response
Documented IR plan with defined severity tiers, escalation paths, and a customer communication commitment of < 72 hours for confirmed data incidents.
Infrastructure & Availability
Hosted on AWS in eu-west-1 with multi-AZ redundancy. Real-time uptime monitoring with a 99.9% SLA target.
Vendor Risk Management
All sub-processors are contractually bound by DPAs and undergo annual security assessments. See sub-processor list below.
Third-Party Vendors
Sub-Processors
All sub-processors are bound by data processing agreements and subject to annual security review.
Legal & Privacy
Policies
Common Questions
FAQs
Looking for your company's Trust Center?
If your organisation uses Compliova, your dedicated Trust Center is available at/trust-center/your-company-slug
or on your configured custom domain.
Security questions or concerns? Contact us at security@compliova.com · Last reviewed: July 2026