SOC 2 Type II certified. AES-256 encryption at rest, TLS 1.3 in transit. Role-based access control, audit logging, annual penetration testing by NCC Group. 99.95% uptime SLA.