Security and legal
How we protect your data and your recipients’ data — and the documents that govern our service.
Security practices
Encryption
TLS 1.2+ in transit and AES-256 encryption at rest for all customer data.
Hosting
Hosted with major cloud providers in the EU or US, with daily encrypted backups.
Access control
SSO, role-based permissions and least-privilege access for our staff.
Monitoring
24/7 uptime monitoring, alerting and centralized audit logging.
Testing
Regular third-party penetration tests and automated dependency scanning.
People
Background checks, security training and confidentiality agreements for every employee.
Legal documents
Privacy Policy
How we collect, use and protect personal data.
ReadTerms of Service
The rules for using our service.
ReadCookie Policy
Which cookies we use and why.
ReadNeed a DPA or security questionnaire?
We sign data processing agreements and complete vendor security reviews.
Responsible disclosure
Found a vulnerability? Please email security@trustedgrp.com. We respond within two business days and never take legal action against good-faith research.