Security

Compliance evidence

Download evidence for SOC 2, ISO 27001 and security questionnaires.

1. 1

   Download

   On the Team plan, Security → Compliance downloads a ZIP covering the last 3, 6 or 12 months.

2. 2

   What’s inside

   Spreadsheets of members and two-factor status, API tokens, access reviews, every deploy with who asked and who approved, vulnerabilities and how each was handled, scans, patching, blocked attacks, backups and restore tests, incidents, and the audit log, with a README mapping each to the controls it supports.

3. 3

   Keeping it complete

   Review access every 90 days, fix or ignore findings with a reason, and keep backup verification on; each shows up in the next pack.

Still stuck? Email us, or send feedback from inside the app.