Security
Enterprise security,
without compromise.
When you handle sensitive client data, security isn't a feature - it's a foundation. We built Combinely with the security standards that the world's largest firms demand.
Certifications & Compliance
SOC 2 Type II
We've completed a rigorous independent audit of our security controls. Our SOC 2 Type II report demonstrates our commitment to maintaining the highest security standards.
GDPR Compliant
Full compliance with European data protection regulations. We provide data processing agreements and support data subject rights requests.
How we protect your data
Security is embedded in every layer of our platform, from infrastructure to application design.
Trusted Data Storage
Flexible storage options designed to match different data sensitivity levels and compliance needs. Your confidential data remains secure and private to you.
No AI Training
Your data is never used to train or fine-tune any AI models. We use commercial AI infrastructure with strict data processing agreements that prohibit model training on customer data.
Strict Access Controls
Every access request is verified and logged. Your data is only accessible to authorized users, and our team requires written approval to access customer data for support purposes.
Encryption Everywhere
All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Encryption keys are managed through AWS KMS with automatic rotation.
Full Ownership & Control
Enterprise SSO support, control over data storage location, retention policies, encryption key management, and full visibility over how your data is managed.
Regular Security Testing
Semi-annual penetration tests covering the full platform scope. We follow an 'assume breach' methodology to proactively identify and mitigate risks.
Questions about security?
We're happy to discuss our security practices in detail, provide our SOC 2 report, or arrange a security review call with our team.
security@combinely.ai