Security & Trust

We protect your data
like you protect your clients.

We build compliance software, so our security posture has to be flawless. Read about how we secure the Privaro platform.

EU Infrastructure

EU hosted on AWS Dublin (eu-west-1). Your data never leaves the EU.

Encryption

AES-256 at rest, TLS 1.3 in transit. Top-tier cryptographic standards.

Access Control

Row-level security, role-based permissions, and MFA support.

Certifications

SOC 2 Type II (in progress). We adhere to the highest industry standards.

Data Isolation

Multi-tenant with database-level isolation per organization.

Penetration Testing

Annual third-party penetration testing to identify and fix vulnerabilities.

GDPR Compliance

We practice what we preach — Privaro is fully GDPR compliant. We maintain our own Records of Processing Activities, manage our vendors meticulously, and have strict data retention policies in place.

  • Data Processing Agreement (DPA) available for all customers.
  • Strict vendor assessment and sub-processor tracking.
  • Dedicated Data Protection Officer (DPO).

Sub-processors

We maintain transparency regarding all third-party services that process data on our behalf. Our sub-processors are carefully vetted for security and compliance.

View our sub-processor list

Security Inquiries

If you have specific security questions, require our DPA, or want to report a vulnerability, our security team is ready to assist.

Contact Security Team