Security & Privacy
Your security and privacy are our top priorities. Learn about our comprehensive security measures, the standards we are building toward, and our data protection practices.
Comprehensive Security Measures
Multi-layered security architecture protecting your data at every level
Infrastructure with controls designed against SOC 2 criteria, monitoring, and threat detection.
- Controls designed against SOC 2 criteria
- 24/7 Security Monitoring
- Threat Detection & Response
- Incident Response Plan
End-to-end encryption for data at rest and in transit using industry-standard protocols.
- AES-256 Encryption at Rest
- TLS 1.3 for Data in Transit
- Encrypted Database Storage
- Secure Key Management
Multi-factor authentication and role-based access control for enhanced security.
- Multi-Factor Authentication
- Role-Based Access Control
- Single Sign-On (SSO)
- API Key Management
Data handling designed around GDPR and CCPA principles with comprehensive privacy controls.
- GDPR-aligned practices
- CCPA-aligned practices
- Data Minimization
- Right to Deletion
Cloud-native architecture with automated security updates and monitoring.
- AWS Security Best Practices
- Automated Security Updates
- Network Segmentation
- DDoS Protection
Advanced user authentication and session management for secure access.
- Password Policy Enforcement
- Session Management
- Account Lockout Protection
- Security Notifications
Standards We Are Building Toward
The security and privacy frameworks that guide how we build CrewFoundry
CrewFoundry is pre-launch — these reflect the standards we are building toward, not certifications we currently hold.
SOC 2
Controls designed against SOC 2 criteria; formal audit planned post-launch
ISO 27001
Security practices modeled on the ISO 27001 framework
GDPR
Data handling designed around GDPR principles
CCPA
Data handling designed around CCPA principles
Security Policies & Documentation
Detailed policies and procedures governing our security practices
Security Policy
Comprehensive security policy covering all aspects of data protection
Privacy Policy
How we collect, use, and protect your personal information
Data Processing Agreement
Terms for processing personal data in compliance with GDPR
Incident Response Plan
Our procedures for responding to security incidents
Recent Security Updates
Latest security enhancements and updates to our platform
Security Enhancement: Enhanced MFA
EnhancementImplemented additional multi-factor authentication options including hardware tokens and biometric authentication.
Security Patch: API Rate Limiting
PatchEnhanced API rate limiting to prevent abuse and ensure service availability.
Compliance Update: GDPR Enhancements
ComplianceUpdated data processing procedures to enhance GDPR compliance and user privacy controls.
Security Questions?
Have questions about our security practices? Our security team is here to help.