Security

Encryption

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). API communications use HTTPS exclusively.

Authentication

Multi-factor authentication is available for all accounts. Role-based access control limits permissions by user role.

Infrastructure

Our infrastructure runs on Google Cloud Platform with SOC 2 compliance. Data centers are ISO 27001 certified.

Access Control

Employee access to production systems requires VPN, MFA, and is logged. Access is reviewed quarterly.

Vulnerability Management

We conduct regular security assessments and maintain a responsible disclosure program at security@trukta.app.