SOC 2 Type II
Audit in progress. Type I report available on request under NDA.
Company
Security you can audit, not just trust.
SOC 2 Type II in progress. GDPR compliant. Customer data isolated by row, end to end.
GDPR + CCPA
Per-contact deletion, export, and consent. DPA available.
Encryption
TLS 1.3 in transit. AES-256 at rest. Per-tenant keys on Scale.
Tenant isolation
Row-level security on every table. No cross-tenant leakage path.
Sub-processors
Public list updated every change. Subscribe for notice.
Vulnerability disclosure
security@foreman.ai · 90-day disclosure window.