We take security compliance seriously
Keeping our customers' data protected at all times is our highest priority.
Thomas Ravenel
Head of Engineering @ Ondorse
Company security
100% of employees follow continuous security training and policies; enforced and monitored by Vanta
We align with SOC type II certification
GDPR compliant
We align with ISO 27001 certification
Strong authentication for Ondorse employees requiring MFA
System security
All data encrypted in transit (TLS 1.2) and at rest (AES-256)
Infrastructure hosted on AWS in Europe (ISO 27001, SOC1 and SOC2 certified)
Data encryption in transit using TLS 1.2+
Data encrypted at rest using AES 256-bit encryption algorithm
Business continuity plan including disaster recovery and data backups
Application security
Single Sign-On (“SSO”)
Control user and API keys access
Immutable audit trail to capture user interactions
Role-based access control
Constant vulnerability scanning and regular penetration testing