Security and governance

Enterprise-ready controls for teams handling sensitive research.

Data Handling

  • Encrypted in transit (TLS 1.2+) and at rest (AES-256)
  • No training on customer data. Ever.
  • Data isolation per workspace

Access Controls

  • Role-based permissions with least-privilege defaults
  • Workspace-level isolation between teams
  • SSO integration available on Enterprise plans

Audit Trail

  • Full version history on every research run
  • Change tracking between report versions
  • User activity logging for compliance reviews

Retention

  • Configurable retention periods per workspace
  • Data deletion on request with confirmation
  • Full export capabilities for data portability

Infrastructure

  • SOC 2 Type II (in progress, on roadmap)
  • Hosted on major cloud provider with 99.9% uptime SLA
  • Regular penetration testing by third-party firms

Compliance

  • GDPR-aware data handling across all plans
  • Data Processing Agreement available on request
  • Privacy-first architecture with minimal data collection

Have security questions?

Reach out at security@Stonesight.research