Security & Compliance
We secure your code the way we secure ours.
Reviewed releases, least-privilege access, and encryption in transit and at rest - by default, on every engagement.
Controls
Security by default, not a tier.
The controls that run on every engagement. The full security overview is available to your team on request.
SOC 2-aligned controls
Encrypted in transit & at rest
Least-privilege access
NDA-first engagement
Reviewed releases
Independent security testing
What we build on
A stack you can vet.
The infrastructure and tools that may handle data on your project - audited providers your security team likely already approves.
Amazon Web Services
Cloud infrastructure & hosting
US / EU (per project)
Cloudflare
CDN, DNS & DDoS protection
Global
GitHub
Source control & CI
US
Sentry
Error & performance monitoring
US
Linear
Project tracking
US
Representative list - the current set is shared and kept current under your DPA.
Security is part of how we build, not a tier you upgrade into.
Built to ship. Built to last.