Compliance & Security

Enterprise-grade security controls designed to meet the most rigorous compliance requirements. Every layer of DataRoom Snap is built with auditability and data protection in mind.

SOC 2 Type II Controls

Our controls are mapped to the AICPA Trust Services Criteria across six key categories.

Access Control

  • Role-based access control (RBAC)Implemented
  • SSO/SAML integration (Okta, Azure AD)Implemented
  • Session management & auto-expiryImplemented
  • IP allowlisting per organizationImplemented

Data Protection

  • AES-256 encryption at restImplemented
  • TLS 1.3 encryption in transitImplemented
  • Field-level encryption for sensitive dataImplemented

Audit Logging

  • Immutable audit trail for all actionsImplemented
  • 7-year log retentionImplemented
  • Exportable logs (CSV/JSON)Implemented

Incident Response

  • Automated alerting & escalationImplemented
  • Webhook notifications for security eventsImplemented
  • < 24-hour response SLAImplemented

Change Management

  • Version-controlled deploymentsImplemented
  • Automated CI/CD pipelinesImplemented
  • One-click rollback capabilityImplemented

Vendor Management

  • Supabase (SOC 2 Type II)Implemented
  • Vercel (SOC 2 Type II)Implemented
  • Stripe (PCI DSS Level 1)Implemented
  • Anthropic (SOC 2 compliant)Implemented

GDPR Compliance

Full compliance with the EU General Data Protection Regulation.

  • Data Processing Agreement (DPA)Implemented
  • Right to erasure (Article 17) via self-serviceImplemented
  • Data portability (Article 20) exportImplemented
  • Consent management & granular preferencesImplemented

Certifications Roadmap

Our path to industry-leading compliance certifications.

SOC 2 Type II

Q3 2026

Independent audit of security, availability, and confidentiality controls

ISO 27001

Q4 2026

Information security management system certification

HIPAA BAA

Q1 2027

Business Associate Agreement for healthcare data handling

Need a security questionnaire completed?

Our security team responds to vendor assessments and custom questionnaires within 2 business days.

Contact Our Team