Security
Enterprise-grade security, by default.
Your company's knowledge is sensitive by nature. Here's how we protect it at every layer.
Encryption everywhere
Data is encrypted in transit with TLS 1.2+ and at rest with AES-256, across every connected source.
Access controls
Role-based permissions and SSO (SAML/OIDC) so only the right people see the right data.
Compliance
SOC 2 Type II in progress and GDPR-aligned data handling, with a signed DPA available for every customer.
Data residency
Choose where your workspace data is stored, with regional hosting options for Growth and above.
Incident response
A documented response plan with customer notification commitments inside our terms.
Responsible disclosure
Found an issue? We credit and respond to every good-faith security report.
Found a security issue?
We take reports seriously and respond quickly. Reach out and we’ll route it directly to the team.
Report an issue