Security & Trust
How we protect your data, and where to find the full technical detail behind these claims.
Encryption
All traffic to and from the platform is encrypted over HTTPS. Sensitive fields, such as lead contact details, are encrypted at rest with AES-256-GCM. Automated database backups are encrypted at the file level before they touch disk.
Tenant isolation
Every workspace's data is scoped by account at the query level. This has been specifically tested against cross-account access attempts, including via API key manipulation, not just assumed to hold.
Access control
Team members get the lowest permission tier that lets them do their job, not admin access by default. Two-factor authentication is available on every account. API keys are scoped to only the resources an integration actually needs, and expire automatically.
Financial integrity
Every charge, refund, and chargeback is recorded in a tamper-evident, hash-chained ledger. A deleted or reordered entry breaks the chain and is caught by an automated verification job, not left to be noticed by chance.
Backups and availability
Daily automated, encrypted database backups with a 14-day retention window, exercisable via a real restore process, not a theoretical one. Uptime is monitored continuously and published on our live status page.
The full technical detail
This page is a summary for a general audience. Every claim above is backed by a specific, detailed control described in our developer documentation, written honestly, including what is not yet in place.
- SOC 2 Overview — security, availability, confidentiality, and privacy controls in detail.
- Information Security Policy — access control, data classification, and incident response.
- Compliance — the full index of compliance documentation, including sub-processors.
- Status & Support — live uptime figures and published incident postmortems.
Reporting a vulnerability
If you believe you've found a security issue, please report it to security@zyntriq.ai rather than filing it publicly. We investigate every report.
See also our Privacy Policy and Terms of Service.