Type II
SOC 2
Controls for security, availability, and confidentiality.
Security at SuperAnnotate
Your data stays protected at every layer
Security is built into how we develop, operate, and deliver our platform. We protect the confidentiality, integrity, and availability of customer data through independently assessed controls and continuous monitoring.
Encrypted
Assessed
Monitored
Restricted
Independent assurance
Controls backed by recognized standards
Our information security program is assessed against widely recognized security and privacy frameworks.
27001:2022
ISO
A globally recognized framework for information security management.
Privacy
GDPR
Protection of personal data and privacy for people in the European Union.
Privacy
CCPA
Data privacy protections for California residents.
Defense in depth
Protection from data to deployment
Administrative, technical, and operational safeguards work together across the full lifecycle of your data.
-
Protect the data
- Encryption in transit
- Encryption at rest
- Data retention and disposal
-
Control access
- Restricted production access
- Asset inventory
- Access termination controls
-
Build securely
- Segregated environments
- Secure development policy
- Change management
-
Monitor continuously
- Security event alerting
- Annual penetration testing
- Incident response plan
Operational resilience
Security is an ongoing practice
Availability
Uptime is monitored, backups are tested through restoration, and business continuity and disaster recovery processes are maintained.
Vulnerability management
Vulnerability and patch management processes are supported by regular third-party penetration testing.
Incident response
A documented response plan governs how confirmed incidents are identified, prioritized, communicated, assigned, and tracked.
Need a deeper security review?
Visit our verified Trust Center for the latest assurance documents, or talk with our team about your requirements.