Cookie Consent by https://www.freeprivacypolicy.com

Security and compliance that you can trust

Stomio is engineered for security and committed to information protection.

SOC2 Type 2 Compliant

Certified by leading third-party cybersecurity auditors.

Encryption in transit and at rest

Both idle and active data is encrypted over public/internal networks and in our databases.

Database security

Our databases are built with multi-layer security including encrypted passwords and strict firewall settings.

Integrations security

Our integrations are authorized securely with OAuth2 and user credentials are not stored for those services.

Penetration testing

Annual penetration tests are performed by a certified third party consultant.

Data recovery

Regular data backup over multiple regions with a maximum of 24-hour RTP and RPO.

Inventory and configuration

Infrastructure is managed as code with changes going through peer reviews and approvals. We have completely isolated environments for development, staging and production.

Personnel security

Employees’ computers are monitored using third party agent with strong passwords, encrypted disks and antivirus. Access to tools and data is strictly restricted and managed by role.

Web security

Web application Firewall is enabled on all public endpoints.

We have a lot in our roadmap!

If you’re interested in what we’re building next, we would love to hear from you!

Easy to get started

Add your teammates, invite your stakeholders to an internal program. Our goal is to make it as easy as possible for you to get started!

Book a demo
Srtomio-start-easy