Trust & Security
Security Overview
While GlossaryPage is not currently SOC 2 compliant, we follow security practices designed to protect customer data and support service reliability. Application data is hosted in the United States using trusted infrastructure providers.
Controls
Technical safeguards
Data storage protection
Encryption at rest
Stored application data is protected with encryption at rest in the underlying infrastructure.
Network protection
Encryption in transit
Public and authenticated traffic is served over encrypted HTTPS connections.
Change traceability
Audit Trail
Changes are logged in an application record trail.
Policies
Operational procedures
Business continuity
Backups & recovery
Backup and recovery procedures are documented for production operations.
Security maintenance
Vulnerability management
Patching, dependency review, and scanning policies are documented for diligence.
Supplier governance
Vendor risk management
Third-party service providers are assessed and monitored for security and compliance risks.
Identity and access management
Authentication security
Strong authentication practices are used to protect user and administrative accounts, including multi-factor authentication where supported.
Security maintenance
Secure development practices
Software changes follow documented development practices, including dependency management and security considerations throughout the development lifecycle.
Operational response
Security monitoring and logging
Application and infrastructure events are monitored and logged to support troubleshooting, security investigations, and incident response activities.
Information governance
Data classification
Sensitive data is classified and handled according to defined retention and protection requirements.
Subprocessors
Infrastructure and service providers
DigitalOcean
Application hosting
NeonDB
Managed database
Sentry
Application monitoring
Cloudflare
CDN & web analytics
Google Cloud
AI content generation
Google reCAPTCHA
Spam protection
Resend
Email delivery
Stripe
Payments
Google Workspace
Customer communication
Slack
Customer communication