Trust & Security
Your clients' data is the foundation of your business. Protecting it is the foundation of ours. Security is built into every layer of Strategy Overview.
Security at every layer
SOC 2 Type II
Independent auditors verify our security, availability and confidentiality controls on an ongoing basis. Reports available under NDA.
Encryption everywhere
Data is encrypted in transit with TLS 1.2+ and at rest with AES-256. Secrets and keys are managed in a hardened vault, never in code.
Enterprise cloud infrastructure
Hosted on Microsoft Azure in SOC-certified datacenters with network isolation, DDoS protection and continuous monitoring.
Data residency choice
Choose where your data lives: United States or European Union (Ireland) datacenters, selected at signup and never moved without consent.
Backups and resilience
Automated encrypted backups with geo-redundant storage, tested restore procedures and a documented business continuity plan.
Access control and SSO
Role-based permissions, per-client access scoping, Microsoft 365 single sign-on and least-privilege access for our own staff.
Continuous monitoring
24/7 infrastructure monitoring, audit logging, anomaly alerts and vulnerability scanning across the whole platform.
Secure development
Code review on every change, dependency scanning, staged deployments and penetration testing by independent third parties.
Responsible disclosure
Found a vulnerability? We want to know. Report it to [email protected] and we'll respond within one business day.
Your data belongs to you
We are stewards of your client data, never owners of it. We do not sell data, we do not train public AI models on your data, and you can export or permanently delete your data at any time. Every user action is logged, every integration uses least-privilege credentials, and our team accesses production only through audited, time-limited approvals.
Security documentation, our latest SOC 2 report, and completed security questionnaires are available to customers and prospects under NDA at [email protected].
Have a security question?
Our team answers security reviews and vendor questionnaires within one business day.
