Security

SOC 2 compliance in progress

We have partnered with Drata to obtain SOC 2 Type I + Il compliance.

Isolated data instances

Each customer's data is stored in separate instances to maintain data separation between customers.

Mature Threat and Vulnerability Management program

We run weekly scans via AWSInspector.

High availability

Data is stored in AWS(us-east-1) in multiple availability zones.

Secure data encryption

We encrypt all customer data both in transit and at rest.

Status page

We communicate a real-time systems status on status.questionbase.com

Enforced MFA

Users authentication via Slack's SSO

Good Incident response policies in place