Scalekit holds ISO 27001 and SOC2 certifications and conducts regular VAPT assessments to maintain high-security standards. Scalekit is also GDPR and CCPA compliant.
Scalekit stores only the data sent from identity providers. For more information, view our Privacy Policy
For North America, customer data is stored in U.S. data centers (Los Angeles). For Europe, all customer data remains within our EU data center in Frankfurt.
Yes, Scalekit uses HTTPS / TLS 1.3 to protect data in transit and at rest, safeguarding your information from unauthorized access.
Scalekit complies with GDPR and CCPA regulations. If you need to request data deletion, please contact security@scalekit.com.
Data is retained for 30 days post-termination and is then permanently deleted unless restoration is requested during that period.
The latest penetration test report can be provided to customers after signing an NDA. Contact us at security@scalekit.com for more details.
Please see our [list of subprocessors] for the most up-to-date information
Please report security issues by emailing us at security@scalekit.com. We address them as quickly as possible.
