## Security & Compliance

Your data is safe with Compt.

## Certifications & standards

Compt is built for HR teams who need flexibility and security teams who need to sleep at night. Our platform undergoes regular independent audits and security reviews, so your data stays audit-ready.

Enterprise-grade compliance looks like:

- **SOC 2 Type II certified**
- **ISO 27001 compliant**
- **GDPR-aligned**

## Platform security

### _Modern security features_

- Single Sign-On (SSO) and Multi-factor Authentication (MFA)
- Role-based access controls
- Data encryption
- Activity logging to track and monitor access

### _Infrastructure and uptime_

**Compt is hosted in a cloud environment with:**

- Encrypted databases and strict firewalling
- Automated threat detection and 24/7 monitoring
- Daily backups + disaster recovery planning
- 99.9%+ uptime and real-time incident alerts

### _Internal controls_

**Security is everyone’s job at Compt.**

- Annual security training for all employees
- Background checks and confidentiality agreements
- Strict device and endpoint security policies
- Internal access reviews and privilege monitoring

### _Ongoing monitoring and audits_

**Compliance is a journey, not a checkbox.**

- Annual SOC 2 and ISO 27001 audits
- Regular pen tests by independent security firms
- Continuous vulnerability scanning and patching
- Vendor risk assessments across our stack

### _Transparency and trust_

**We’re happy to show our work. Request access to:**

- Our SOC 2 report (under NDA)
- Our security policies and procedures
- Our list of subprocessors and DPA

## Have a question or need help _?_

Contact our team or see our [Privacy Policy](/content/compt-privacy-policy/index.html) for more information.