Trust center

Security, privacy, and a compliance roadmap you can verify

Current safeguards, data-processing documents, sub-processors, and the milestones in our SOC 2 Type II program.

Key facts

Hosting

AWS us-east-1 (multi-AZ)

Encryption of stored data

AES-256 (RDS, S3, EBS)

Encryption of data in transit

TLS 1.2+ everywhere

Audit log retention

7 days (Free) / 1 year (Starter+) / 3 years (Pro+)

GDPR data subject rights

Export · Erasure · Rectification (admin UI)

Data residency

us-east-1 today; EU + APAC on Enterprise (2027)

Backup

Daily snapshots, 30-day retention

Uptime target (goal, not a guarantee)

99.95% (Multi-AZ AWS)

Documents + commitments

Sub-processors

The third-party services svdy relies on to deliver the product. Public list updated when the stack changes.

View list →

Data Processing Addendum

GDPR Article 28 DPA template available for customers in regulated jurisdictions. Sign on request.

Request DPA →

SOC 2 Type II roadmap

SOC 2 Type II program in progress. Follow the public milestones toward a report targeted for Q3 2027.

See timeline →

Security overview

AWS multi-AZ architecture, encryption at rest + in transit, access control, audit logs, incident response.

What we collect, why we collect it, how long we keep it, and the rights your staff can exercise.

Read policy →

The agreement that governs your use of SVDY, including uptime, data ownership, and termination.

Read terms →

Regulatory posture

Our compliance program tracks the regulatory landscape that affects workforce-management data: GDPR (EU), CCPA/CPRA (California), PIPL (China for offshore SMBs with mainland workforce), and the usual ISO / SOC 2 industry baselines.

See full compliance program

Got a security questionnaire?

We respond to vendor due-diligence requests within 3 business days, including CAIQ-Lite + custom forms. Send the form, get a signed response.

Email security@svdy.com