← Back to home

Security

How we protect your data and your customers' data.

Encryption

AES-256 at rest for all integration credentials. TLS 1.3 in transit. Per-tenant encryption keys.

Infrastructure

Hosted on SOC 2 Type II infrastructure. Postgres with row-level security. Daily encrypted backups with point-in-time recovery.

Access control

Least-privilege service roles. All admin actions logged. No employee access to customer data without ticketed business need.

Compliance

GDPR-aligned data handling, DPA available on request, SOC 2 Type II report shareable under NDA.

Report a vulnerability

Please email support@contextdesk.app. We acknowledge reports within 48 hours.