Trust Center

Security you can verify

We're a security company. That means we hold ourselves to the same standards we help you achieve. Here's everything you need to know about how we protect your data.

SOC 2 Type IICertified 2024
ISO 27001Certified 2024
PCI DSSCompliant 2024
GDPRCompliant 2024

Our commitments

What we promise

Security by design

Security isn't an afterthought—it's built into every feature from day one.

Your data stays yours

We never sell your data. We never use it to train AI models. Period.

Enterprise-grade infrastructure

Hosted on AWS with encryption at rest and in transit, SOC 2 compliant data centers.

We walk the walk

We use vCISO Lite to manage our own compliance program. If it's good enough for us, it's good enough for you.

We eat our own dog food

vCISO Lite isn't just something we sell—it's something we use every day. Our entire security program runs on our own platform. Every policy we generate, every gap analysis we run, every audit pack we create for our own auditors comes from vCISO Lite.

When we achieved SOC 2 Type II certification, we did it using the same tools we're offering you. When our ISO 27001 auditor asked for evidence, we generated it the same way you will. This isn't a product we built and handed off—it's a product we depend on.

See our compliance journey
vC
SOC 2 Type IIISO 27001PCI DSS

Managed with vCISO Lite

Questions about security?

Our security team is happy to answer questions, provide documentation, or schedule a call to discuss your specific requirements.