Trust center

Security and compliance you can verify

How SVDY protects your data, the audits we run, and the documents you need for vendor reviews.

Key facts

Hosting

AWS us-east-1 (multi-AZ)

Encryption at rest

AES-256 (RDS, S3, EBS)

Encryption in transit

TLS 1.2+ everywhere

Audit log retention

7 days (Free) / 1 year (Starter+) / 3 years (Pro+)

GDPR data subject rights

Export · Erasure · Rectification (admin UI)

Data residency

us-east-1 today; EU + APAC on Enterprise (2027)

Backup

Daily snapshots, 30-day retention

Uptime architecture target

99.95% (Multi-AZ AWS)

Documents + commitments

Sub-processors

The third-party services svdy relies on to deliver the product. Public list updated when the stack changes.

View list →

Data Processing Addendum

GDPR Article 28 DPA template available for customers in regulated jurisdictions. Sign on request.

Request DPA →

SOC 2 Type II

Targeted Q1 2027. Public timeline with milestones — auditor selection, evidence collection, report.

See timeline →

Security overview

AWS multi-AZ architecture, encryption at rest + in transit, access control, audit logs, incident response.

Regulatory posture

Our compliance program tracks the regulatory landscape that affects workforce-management data: GDPR (EU), CCPA/CPRA (California), PIPL (China for offshore SMBs with mainland workforce), and the usual ISO / SOC 2 industry baselines.

See full compliance program

Got a security questionnaire?

We respond to vendor due-diligence requests within 3 business days, including CAIQ-Lite + custom forms. Send the form, get a signed response.

Email security@svdy.com